Security Assessment and Testing (Domain 6)
Mike Chapple, David Nils Seidl · 2018
This chapter presents multiple-choice questions related to security assessment and testing. One of the questions relates to a zero-day vulnerability that is announced for the popular Apache web server in the middle of a workday. He needs to quickly scan his network to determine what servers are vulnerable to the issue in Jacob's role as an information security analyst. Karen's organization has been performing system backups for years but has not used the backups frequently. During a recent system outage, when administrators tried to restore from backups, they found that the backups had errors and could not be restored. Another question relates to a team that is working to persuade their management that their network has extensive vulnerabilities that attackers could exploit.