Chapter 10. Vulnerability and Risk Assessment

This chapter covers the following subjects:

• Conducting Risk Assessments—This section covers risk management and assessment. It discusses the differences between qualitative and quantitative risk and describes the methodologies of an important part of risk management—vulnerability management. Also covered are various ways to assess vulnerabilities and how to perform penetration tests.

• Assessing Vulnerability with Security Tools—In this section, you learn how to use common network security tools to measure the vulnerability of your computer systems and network devices. These tools include network mappers, vulnerability scanners, protocol analyzers, packet sniffers, and password crackers.

This chapter covers the CompTIA Security+ SY0-301 objectives 1.1, 2.1, 2.2, 3.7, and 3.8.