Chapter Six. Security Assessment and Testing

This chapter provides questions that address the key areas of knowledge for Domain 6, Security Assessment and Testing, of the CISSP Candidate Information Bulletin. This chapter also examines audits, vulnerability assessments, and penetration testing. Exam candidates need to know how these activates can be used to test and strengthen security. I have also placed questions regarding attacks and incident response in this chapter. As a CISSP, you need to know how to react to each one of these situations and which responses are considered legal and ethical.

What will you do when you discover that a network intrusion has taken place? How will you handle potential computer evidence? Knowledge of these subjects ...

Get CISSP Practice Questions Exam Cram, Fourth Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.