Vulnerability Management (30%)CS0-003 Study Guide

Vulnerability Scanning Techniques

Objective 2.1 · Vulnerability Mgmt

Vulnerability Prioritization

Objective 2.2 · Vulnerability Mgmt

Patch and Remediation Workflows

Objective 2.3 · Vulnerability Mgmt

Cloud Vulnerability Management

Objective 2.4 · Vulnerability Mgmt

Nessus Vulnerability Scanner

Objective 2.1 · Vulnerability Mgmt

Qualys and OpenVAS Scanners

Objective 2.1 · Vulnerability Mgmt

CVE, CVSS, and EPSS Scoring

Objective 2.2 · Vulnerability Mgmt

Remediation SLAs and Risk Acceptance

Objective 2.3 · Vulnerability Mgmt

Cloud Security Posture Management (CSPM)

Objective 2.4 · Vulnerability Mgmt

Penetration Testing vs Vulnerability Assessment

Objective 2.1 · Vulnerability Mgmt

Vulnerability Management Workflow

Objective 2.2 · Vulnerability Mgmt

Attack Surface Analysis and Reduction

Objective 2.1 · Vulnerability Mgmt

OWASP Top 10 for Security Analysts

Objective 2.4 · Vulnerability Mgmt

Web Application Vulnerability Scanning

Objective 2.1 · Vulnerability Mgmt

Container Image Vulnerability Scanning

Objective 2.4 · Vulnerability Mgmt

EPSS Probabilistic Scoring for Prioritisation

Objective 2.2 · Vulnerability Mgmt

Compensating Controls for Unpatched Vulnerabilities

Objective 2.3 · Vulnerability Mgmt

Zero-Day Vulnerability Response

Objective 2.3 · Vulnerability Mgmt

Continuous Compliance Monitoring

Objective 2.4 · Vulnerability Mgmt

DevSecOps and Shifting Security Left

Objective 2.4 · Vulnerability Mgmt

Software Bill of Materials (SBOM)

Objective 2.4 · Vulnerability Mgmt

API Security Testing and Analysis

Objective 2.4 · Vulnerability Mgmt

Infrastructure-as-Code Security Scanning

Objective 2.4 · Vulnerability Mgmt

SAST vs DAST Tools and Integration

Objective 2.4 · Vulnerability Mgmt