Exam Syllabus: WEB

Understands security implications of installing software outside of OS package manager

Understands enterprise patching strategies for Linux

Can obtain operating system patch levels on UNIX-like and Windows operating systems.

Keep accurate records of changes made to the systems during an assessment

Understand scoping in Cloud environments, and the impact of IaaS vs PaaS vs SaaS

Understanding of the different types of testing (blackbox, whitebox, etc) and their relative advantages and disadvantages

Understands the security implications of session IDs exposed in URLs

Understands the need for server-side validation and the flaws associated with client-side validation

Can demonstrate the mapping of a network using a range of tools, such as traceroute, traceroute and ping, and by querying active searches, such as DNS and SNMP servers

Understands network routing and its associated protocols, including: • RIP • OSPF • EIGRP • BGP • IGMP