1 1 00:00:00,120 --> 00:00:01,380 In this section of the course, 2 2 00:00:01,380 --> 00:00:03,630 we're going to cover vulnerability scanning. 3 3 00:00:03,630 --> 00:00:06,540 As we do that, we're going to continue to explore domain two, 4 4 00:00:06,540 --> 00:00:09,030 vulnerability management, specifically focusing on 5 5 00:00:09,030 --> 00:00:12,060 portions of objectives 2.1 and 2.2. 6 6 00:00:12,060 --> 00:00:14,940 Objective 2.1 states that given the scenario, 7 7 00:00:14,940 --> 00:00:16,140 you must be able to implement 8 8 00:00:16,140 --> 00:00:18,510 vulnerability scanning methods and concepts. 9 9 00:00:18,510 --> 00:00:21,240 And objective 2.2 states that given a scenario, 10 10 00:00:21,240 --> 00:00:22,830 you must be able to analyze output 11 11 00:00:22,830 --> 00:00:24,810 from vulnerability assessment tools. 12 12 00:00:24,810 --> 00:00:27,180 So, as we move through this section of the course, 13 13 00:00:27,180 --> 00:00:29,190 we're going to start out by discussing how vulnerabilities 14 14 00:00:29,190 --> 00:00:32,490 are identified using different vulnerability scanning tools. 15 15 00:00:32,490 --> 00:00:34,410 Next, we're going to talk about the workflow 16 16 00:00:34,410 --> 00:00:37,050 that analysts is going to use in conducting their scans 17 17 00:00:37,050 --> 00:00:38,520 and the different scope considerations 18 18 00:00:38,520 --> 00:00:40,080 that they have to think about. 19 19 00:00:40,080 --> 00:00:41,550 Then we're going to be talking about 20 20 00:00:41,550 --> 00:00:43,230 the different types of scanners that exist 21 21 00:00:43,230 --> 00:00:44,880 and the different types of scanning parameters 22 22 00:00:44,880 --> 00:00:47,730 that you're going to be using as a cybersecurity analyst. 23 23 00:00:47,730 --> 00:00:50,460 Next, we'll be covering scheduling and other constraints 24 24 00:00:50,460 --> 00:00:52,230 that a cybersecurity analyst has to consider 25 25 00:00:52,230 --> 00:00:54,480 when developing their vulnerability scanning program 26 26 00:00:54,480 --> 00:00:56,490 within their own organizations. 27 27 00:00:56,490 --> 00:00:59,070 Then we'll be talking about the vulnerability feeds 28 28 00:00:59,070 --> 00:01:00,270 that you're going to be using to ensure that 29 29 00:01:00,270 --> 00:01:02,190 you always have the latest and most up-to-date 30 30 00:01:02,190 --> 00:01:04,290 vulnerabilities during your scans. 31 31 00:01:04,290 --> 00:01:06,750 Next, we'll move into the coverage of the sensitivity levels 32 32 00:01:06,750 --> 00:01:08,520 that you need to configure for your scans 33 33 00:01:08,520 --> 00:01:10,620 and how to best mitigate the risk of scanning 34 34 00:01:10,620 --> 00:01:13,440 against the security needs of your enterprise network. 35 35 00:01:13,440 --> 00:01:15,540 After that, we're going to perform a demonstration 36 36 00:01:15,540 --> 00:01:18,150 where we conduct a vulnerability scan of a real network 37 37 00:01:18,150 --> 00:01:20,010 so you can see how these tools are being utilized 38 38 00:01:20,010 --> 00:01:21,090 in the real world. 39 39 00:01:21,090 --> 00:01:23,130 And finally, you're going to take a short quiz to see 40 40 00:01:23,130 --> 00:01:24,960 what you learned during this section of the course 41 41 00:01:24,960 --> 00:01:27,000 and review each of those quiz questions fully 42 42 00:01:27,000 --> 00:01:27,900 to ensure you can explain 43 43 00:01:27,900 --> 00:01:29,880 why the correct answers were correct. 44 44 00:01:29,880 --> 00:01:32,130 So let's dive into our lessons focused on 45 45 00:01:32,130 --> 00:01:34,350 vulnerability scanning in order to better understand 46 46 00:01:34,350 --> 00:01:37,163 the threats to our networks in this section of the course.