Searching CertSprout…

CertSproutGrow your skills. Collect your wins.

CertSprout is not affiliated with CompTIA, Microsoft, Cisco, ISC2, AWS or any other certification body. CertSprout reads credentials from issuers’ public records at the credential holder’s request.

For teams Privacy Terms Support About our bot Created by Samios Software Solutions

A little curiosity goes a long way

Find your next discovery.

Search certifications, learning topics, career paths, public profiles and help across CertSprout.

Search CertSprout

Browse certifications by field or career path →Provider offerings & September 2026 review notes →

Everything Certifications Mini-lessons People Career paths Study resources Exam deals App & help

Showing 20 results · Page 13 for “security”. More results are available below.

Mini-lessons

CCSP · Cloud governance and cost

Make ownership and cost visible

Cloud governance connects resource decisions to business ownership, access rules and spending controls. Consistent tags and accounts help identify who should respond to a cost increase or un…

CCSP · Cloud security

Cloud security follows the data and identities

…iguration work together; neither alone establishes the security of the application. Worked example An application needs a cloud API credential while running. Which approach minimizes stored …

CCSP · Privacy engineering

Minimize personal data across every copy

Privacy engineering applies lifecycle controls to application data, telemetry, caches, indexes and exports. Collect only what the feature needs and avoid unnecessary sensitive values in logs…

← PreviousPage 13Next →

People search uses public names, handles and headlines. Private and unlisted profiles are excluded. Your goals are visible only to you in search.

CCST-SEC · Incident response

Containment and recovery solve different problems

Containment limits ongoing damage, while eradication removes the cause and recovery restores trusted operation. These activities may overlap as new evidence appears. Preserve useful evidence…

CCST-SEC · Network protection

Allow the required flow at the right boundary

A network rule should express a justified communication path with the necessary source, destination, protocol and service. Segmentation limits how far a compromise can spread, but only when …

CCST-SEC · Security foundations

Match the control to the security objective

Confidentiality limits who can see information, integrity protects against unauthorized changes, and availability keeps services usable. A control may support several objectives, but the imm…

CCZT · Cloud security

Cloud security follows the data and identities

…iguration work together; neither alone establishes the security of the application. Worked example An application needs a cloud API credential while running. Which approach minimizes stored …

CCZT · Identity and access

Authentication and authorization answer different questions

Authentication establishes who or what is requesting access. Authorization decides which actions that identity may perform on a resource. A successful sign-in therefore does not imply permis…

CCZT · Security architecture

Place controls at trust boundaries

…ata or actions cross between components with different security assumptions. Map those crossings and require appropriate validation, identity checks and authorization. Layer controls so one …

CEH · Web application security

Validate input and enforce access on the server

Browser-side checks improve usability but can be bypassed. The server must validate input and authorize the requested operation on the specific object. Keep data separate from executable que…

CESP-ADCS · Active Directory assessment concepts

Active Directory assessment concepts

This concept review develops the reasoning needed for active directory assessment concepts. Start by identifying the relevant assets, permissions, evidence and trust boundaries. Distinguish …

CESP-ADCS · Directory security assessment

Directory permissions form paths to privilege

Directory security depends on relationships among accounts, groups, computers and delegated permissions. A seemingly ordinary account may control another object that holds stronger access. E…

CESP-ADCS · Authorized penetration testing

Authorization defines the assessment

A penetration test starts with explicit scope, permitted techniques, timing and stop conditions. These boundaries protect operations and make results interpretable. Demonstrate the impact ne…

CESP-ADCS · Security findings and communication

A finding should explain a decision

A useful security finding connects an affected asset, the observed weakness, the conditions for exploitation and the resulting impact. Include enough reproducible evidence to verify the conc…

CETP · Active Directory assessment concepts

Active Directory assessment concepts

This concept review develops the reasoning needed for active directory assessment concepts. Start by identifying the relevant assets, permissions, evidence and trust boundaries. Distinguish …

CETP · Directory security assessment

Directory permissions form paths to privilege

Directory security depends on relationships among accounts, groups, computers and delegated permissions. A seemingly ordinary account may control another object that holds stronger access. E…

CETP · Authorized penetration testing

Authorization defines the assessment

A penetration test starts with explicit scope, permitted techniques, timing and stop conditions. These boundaries protect operations and make results interpretable. Demonstrate the impact ne…

CETP · Security findings and communication

A finding should explain a decision

A useful security finding connects an affected asset, the observed weakness, the conditions for exploitation and the resulting impact. Include enough reproducible evidence to verify the conc…

CHFI · Security findings and communication

A finding should explain a decision

A useful security finding connects an affected asset, the observed weakness, the conditions for exploitation and the resulting impact. Include enough reproducible evidence to verify the conc…

CIPT · Secure software lifecycle

Build security into the delivery lifecycle

Security requirements belong alongside functional requirements. Model likely misuse early, use secure implementation patterns, and check changes through review and testing. Track dependencie…