CISSP Domain 6 Review / Mind Map (2 of 3) | Vulnerability Assessment and Penetration Testing

[@destcert]

Busy life? Only have a few hours to study per week? Our CISSP MasterClass adjusts to your schedule: destcert.com/CISSP

[@shawnfaham9053]

By far, your videos are the best summary/review I have seen on the internet. My exam is scheduled on August the 22nd, I hope you have time to post Domain 4/3. Thank you very much

[@RockyRxx]

May the people who have disliked the video get their networks hacked .... These are the best videos ever

[@lauraburns7246]

Thanks for the videos! My mind map for Domain 6 is slightly different. Under "Types of Scans", I have Network Discovery, Network Vulnerability, Web, and Database blocks. Then, under Network Vulnerability, I have the authenticated and unauthenticated blocks you mentioned (though I could also see them aligned with the other types). Finally, I don't personally see fingerprinting and banner grabbing as one of the upper blocks in Identifying Vulnerabilities. Instead, I have them under the Reconnaissance blocks. Thanks again for the videos. I've found them very useful!

[@narayananbm9629]

Excellent explanation 👌 . I have subscribed and liked. I recommend everyone who are preparing for CISSP. Very helpful for final revision. Waiting for the sessions for all other domains too.

[@destcert]

Thanks a lot 😊

[@nageshgautam9060]

Thanks ..your videos are really helpful for quick revision of domains, any plans for domain 4 Mind map..

[@HUSSAIN076]

Short and sweet explanation of each topics... Would you share that mind map in pdf

[@HassanAli-bw2hh]

Helpful material

[@ANTZGTR]

Great Video

[@destcert]

Thanks!

[@MuhammadKashif-qy4ht]

Excellent

[@destcert]

Thanks!

[@TayDoe240]

Why does every single source have different answers??? NIST says the pentest process is planning--discovery--attack---reporting. Very frustrating I hate studying for this **** exam

[@destcert]

Because different authoritative documents talk about the same topics differently. The CISSP exam has been designed to test your competence as a security professional. To see if you understand the underlying concepts and can apply them. The exam is not about rote memorization. Just memorizing a bunch of facts does make someone a competent security professional. So I wouldn’t be overly focused on memorizing lists and steps. Focus on why you conduct pen tests, how they can be employed, how to interpret the results, to whom and how to report the results. Hope that helps!