CRISC 2023: Security Testing

Vulnerability scanning identifies host and network vulnerabilities and must be an ongoing task. Penetration testing is an active security method by which there is an attempt to exploit discovered vulnerabilities.

In this course you will begin by discovering how to plan for schedule and execute vulnerability assessments identify common vulnerability scanning tools and conduct an Nmap scan. Next you will use Zenmap to execute a security scan and test web app security using the Open Worldwide Application Security Project (OWASP) Zed Attack Proxy (ZAP) tool. Then you will explore penetration testing and the Metasploit framework and use the Burp Suite tool as an HTTP intermediary proxy. Finally you will view security alerts using Microsoft Defender for Cloud.

This course can be used to prepare for the ISACA Certified in Risk and Information Systems Control (CRISC) certification.