Domain 222% of scored content
Threats, Vulnerabilities, and Mitigations
Who attacks and why, how they get in, the weaknesses they exploit, the clues they leave behind, and the controls that make an enterprise a harder target.
5 topics
About 13 minutes of reading
- 2.1Threat actors and motivationsDefenders plan better when they know who they face. Threat actors differ in where they sit (inside or outside), how much money and skill they have, and what they want. The exam pairs an actor with a motivation and expects you to recognize both from a short scenario.2 min read
- 2.2Threat vectors and attack surfacesA threat vector is the path an attacker uses to get in; the attack surface is the sum of all those paths. This objective walks through message-based attacks, files and images, voice, removable media, vulnerable software, unsupported systems, open services, default credentials, the supply chain, and human manipulation.3 min read
- 2.3Types of vulnerabilitiesA vulnerability is a weakness a threat can exploit. This objective spans application flaws (memory and injection bugs, race conditions, malicious updates), operating system and web flaws, hardware and firmware, virtualization, cloud, supply chain, cryptographic weaknesses, misconfiguration, mobile, and zero-day vulnerabilities.3 min read
- 2.4Indicators of malicious activityThis is a scenario objective: you read symptoms and name the attack. It covers malware types, physical attacks, network attacks, application attacks, cryptographic and password attacks, and the general indicators (impossible travel, lockouts, missing logs) that point to compromise.3 min read
- 2.5Mitigation techniquesMitigations shrink what an attacker can reach and limit what they can do once in. The exam lists segmentation, access control, application allow lists, isolation, patching, encryption, monitoring, least privilege, configuration enforcement, decommissioning, and hardening techniques.2 min read