Vulnerability Assessment Training: Protecting Your Organization

Course 589

Duration: 4 days
Labs: Yes
Language: English
Level: Intermediate

This training course on Vulnerability Assessment instructs participants on minimising expensive security breaches and assessing risks within their enterprise stemming from various vulnerabilities.

Participants will learn to develop a comprehensive checklist for network security vulnerability assessments, pinpointing weaknesses in infrastructure, servers, web applications, and desktops. Moreover, the course covers report creation and interpretation, configuration of vulnerability scanners, identification of vulnerability points, and strategies for preventing network exploitation.

Vulnerability Assessment Training Delivery Methods

In-Person
Online

Vulnerability Assessment Training Course Information

In this course, you will learn how to:

Detect and respond to vulnerabilities, and minimise exposure to security breaches
Employ real-world exploits and evaluate their effect on your systems
Configure vulnerability scanners to identify weaknesses
Analyse the results of vulnerability scans
Establish an efficient strategy for vulnerability management

Prerequisites

Before taking this course, you should have a basic understanding of network security and security issues at the level of

Learning Tree course 468, Introduction to Cybersecurity ,
Learning Tree course 446, CompTIA Security+® Training,

And you should have an understanding of the following:

TCP/IP networking
Network security goals and concerns
The roles of firewalls and intrusion detection systems

Continuing Education Information

This course covers multiple domains on the ISC2™ CISSP certification exam
If you are interested in achieving the CISSP certification, see CISSP® Training and Certification Prep Course • course 2058

Vulnerability Assessment Course Outline

Module 1: Fundamentals

Introduction

Defining vulnerability, exploit, threat and risk
Creating a vulnerability report
Conducting an initial scan
Common Vulnerabilities and Exposure (CVE) list

Scanning and exploits

Vulnerability detection methods
Types of scanners
Port scanning and OS fingerprinting
Enumerating targets to test information leakage
Types of exploits: worm, spyware, backdoor, rootkits, Denial of Service (DoS)
Deploying exploit frameworks

Module 2: Analysing Vulnerabilities and Exploits

Uncovering infrastructure vulnerabilities

Uncovering switch weaknesses
Vulnerabilities in infrastructure support servers
Network management tool attacks

Attacks against analysers and IDS

Identifying Snort IDS bypass attacks
Corrupting memory and causing Denial of Service

Exposing server vulnerabilities

Scanning servers: assessing vulnerabilities on your network
Uploading rogue scripts and file inclusion
Catching input validation errors
Performing buffer overflow attacks
SQL injection
Cross-Site Scripting (XSS) and cookie theft

Revealing desktop vulnerabilities

Scanning for desktop vulnerabilities
Client buffer overflows
Silent downloading: spyware and adware
Identify browser privilege escalation vulnerabilities

Module 3: Configuring Scanners and Generating Reports

Implementing scanner operations and configuration

Choosing credentials, ports and dangerous tests
Preventing false negatives
Creating custom vulnerability tests
Customising Nessus scans
Handling false positives

Creating and interpreting reports

Filtering and customising reports
Interpreting complex reports
Contrasting the results of different scanners

Module 4: Assessing Risks in a Changing Environment

Researching alert information

Using the National Vulnerability Database (NVD) to find relevant vulnerability and patch information
Evaluating and investigating security alerts and advisories
Employing the Common Vulnerability Scoring System (CVSS)

Identifying factors that affect risk

Evaluating the impact of a successful attack
Determining vulnerability frequency
Calculating vulnerability severity
Weighing important risk factors
Performing a risk assessment

Module 5: Managing Vulnerabilities

The vulnerability management cycle

Examine Common Platform Enumeration and how to use it
Patch and configuration management
Analysing the vulnerability management process

Vulnerability controversies

Investigating CPE
Baseline management
Achieving compliance

Get This Course 30 750 kr

4-day instructor-led training course
Earn 23 CompTIA CEUs
One-on-one after course instructor coaching

Include dates with afternoon start times

#589

jan 6 - 9 15:00 - 22:30 CET

Herndon, VA or Virtual
jan 27 - 30 9:00 - 16:30 CET

Stockholm or Virtual
jan 27 - 30 10:00 - 17:30 CET

London or Virtual
apr 7 - 10 15:00 - 22:30 CEST

Herndon, VA or Virtual
apr 27 - 30 9:00 - 16:30 CEST

Stockholm or Virtual
apr 27 - 30 10:00 - 17:30 CEST

London or Virtual
jul 7 - 10 15:00 - 22:30 CEST

Herndon, VA or Virtual

Bring this or any training to your organisation
Full-scale program development
Delivered when, where, and how you want it
Blended learning models
Tailored content
Expert team coaching

#589

Speak with a Learning Consultant

Inquiring For

Myself

Team/Group

First Name*

Last Name*

Email*

Phone Number*

Company*

Job Title

I'm interested In

* Required Fields

Speak with a Learning Consultant

Fill out the form below

Inquiring For

Myself

Team/Group

First Name*

Last Name*

Email*

Phone Number*

Company*

Job Title

I'm interested In

* Required Fields

Need Help Finding The Right Training Solution?

Our training advisors are here for you.

Course FAQs

The process of defining, identifying, classifying and prioritising what vulnerabilities are in your system.

This assessment aims to find out what vulnerabilities may be within your system in time to fix them.

A vulnerability assessment scans for known vulnerabilities, while a penetration test tries to exploit and fix the weaknesses actively.

Yes! We know your busy work schedule may prevent you from getting to one of our classrooms which is why we offer convenient online training to meet your needs wherever you want. This course is available in class and live online.

Vulnerability Assessment Training: Protecting Your Organization

Vulnerability Assessment Training Delivery Methods

Vulnerability Assessment Training Course Information

Vulnerability Assessment Course Outline

Module 1: Fundamentals

Module 2: Analysing Vulnerabilities and Exploits

Module 3: Configuring Scanners and Generating Reports

Module 4: Assessing Risks in a Changing Environment

Module 5: Managing Vulnerabilities

Course FAQs

What is vulnerability assessment?

What is the purpose of a vulnerability assessment?

What is the difference between vulnerability assessment and penetration testing?

Can I learn vulnerability assessment online?

Related Courses