Chapter 6: Security Assessment and Testing Domain 6 Practice Questions
Questions from the following topics are included in this domain:
- Designing and validating assessments and tests
- Conducting security control testing
- Collecting security process data
- Analyzing test output data and generating reports
- Conducting and facilitating security audits
To pass the CISSP exam, you must score high in the Security Assessment and Testing domain. Domain 6 has a 12% weighting on the exam and requires you to understand how to design and validate assessments and audits. Audits need to be done within the organization and, externally, acting as if a black hat hacker were performing them.
Security control testing includes vulnerability scanning and assessment, penetration testing, and observing activity through log files. It also covers understanding where management is involved in the security process, including disaster recovery and business continuity.
Code review...
