-: In this section of the course, we're going to cover 2 2
how to analyze output from vulnerability scans. 3 3
Now, we're going to stay in Domain 2, 4 4
vulnerability management, 5 5
and go back to Domain 4, reporting and communication, 6 6
in this section of the course 7 7
and, here, we're going to be focused on 8 8
multiple different objectives, 9 9
including Objectives 2.1, 2.3, and 4.1. 10 10
Now, Objective 2.1 states that, given a scenario, 11 11
you must be able to implement 12 12
vulnerability scanning methods and concepts. 13 13
Objective 2.3 states that, given a scenario, 14 14
you must be able to analyze data 15 15
to prioritize vulnerabilities. 16 16
And Objective 4.1 states 17 17
that you must be able to explain the importance 18 18
of vulnerability management reporting and communication. 19 19
Now, as we move through this section, 20 20
we're going to be starting out by discussing 21 21
the contents of a vulnerability scan report. 22 22
As part of this, 23 23
we're going to be looking at the common identifiers 24 24
such as CVEs, NVDs, CWEs, 25 25
CAPECs, CPEs, and CCEs. 26 26
Next, we're going to be talking about 27 27
the common vulnerability scoring system, known as CVSS. 28 28
Now, these metrics are going to be applied to 29 29
our given threats and vulnerabilities 30 30
to help us understand how dangerous they really are. 31 31
Then, we're going to dive deeper into the CVSS metrics 32 32
to better understand how you can interpret and utilize 33 33
these metrics and their scoring data 34 34
when you're trying to prioritize risk 35 35
inside of your network. 36 36
Next, we're going to describe 37 37
how you can read a vulnerability report 38 38
to validate the results of your scan. 39 39
This is going to be important, 40 40
because you're going to be getting questions on your exam 41 41
that require you to be able to perform this type of action. 42 42
Then, we're going to talk about 43 43
some specific vulnerability scanners 44 44
like Nessus, OpenVAS, and Qualys, 45 45
and, after that, we're going to perform a demonstration 46 46
where we analyze vulnerabilities found 47 47
while we conduct a vulnerabilities scan together 48 48
in my lab environment. 49 49
Finally, we're going to take a short quiz 50 50
to see what you learned during this section of the course 51 51
and review each of those quiz questions 52 52
to ensure you understand 53 53
why the right answers were truly right. 54 54
So, let's go ahead and get started 55 55
analyzing output from vulnerability scans and scanners 56 56
so you can better understand 57 57
all the vulnerabilities that exist within your networks 58 58
during this section of the course.