Searching CertSprout…

CertSproutGrow your skills. Collect your wins.

CertSprout is not affiliated with CompTIA, Microsoft, Cisco, ISC2, AWS or any other certification body. CertSprout reads credentials from issuers’ public records at the credential holder’s request.

For teams Privacy Terms Support About our bot Created by Samios Software Solutions

A little curiosity goes a long way

Find your next discovery.

Search certifications, learning topics, career paths, public profiles and help across CertSprout.

Search CertSprout

Browse certifications by field or career path →Provider offerings & September 2026 review notes →

Everything Certifications Mini-lessons People Career paths Study resources Exam deals App & help

Showing 20 results · Page 16 for “security”. More results are available below.

Mini-lessons

CRTO · Active Directory assessment concepts

Active Directory assessment concepts

This concept review develops the reasoning needed for active directory assessment concepts. Start by identifying the relevant assets, permissions, evidence and trust boundaries. Distinguish …

CRTO · Authorized penetration testing

Authorization defines the assessment

A penetration test starts with explicit scope, permitted techniques, timing and stop conditions. These boundaries protect operations and make results interpretable. Demonstrate the impact ne…

CRTO · Security findings and communication

A finding should explain a decision

← PreviousPage 16Next →

People search uses public names, handles and headlines. Private and unlisted profiles are excluded. Your goals are visible only to you in search.

A useful security finding connects an affected asset, the observed weakness, the conditions for exploitation and the resulting impact. Include enough reproducible evidence to verify the conc…

CRTO · Web assessment reasoning

Web assessment reasoning

This concept review develops the reasoning needed for web assessment reasoning. Start by identifying the relevant assets, permissions, evidence and trust boundaries. Distinguish what the obs…

CRTP · Active Directory assessment concepts

Active Directory assessment concepts

This concept review develops the reasoning needed for active directory assessment concepts. Start by identifying the relevant assets, permissions, evidence and trust boundaries. Distinguish …

CRTP · Directory security assessment

Directory permissions form paths to privilege

Directory security depends on relationships among accounts, groups, computers and delegated permissions. A seemingly ordinary account may control another object that holds stronger access. E…

CRTP · Authorized penetration testing

Authorization defines the assessment

A penetration test starts with explicit scope, permitted techniques, timing and stop conditions. These boundaries protect operations and make results interpretable. Demonstrate the impact ne…

CRTP · Security findings and communication

A finding should explain a decision

A useful security finding connects an affected asset, the observed weakness, the conditions for exploitation and the resulting impact. Include enough reproducible evidence to verify the conc…

CS-CCCS · Cloud security

Cloud security follows the data and identities

…iguration work together; neither alone establishes the security of the application. Worked example An application needs a cloud API credential while running. Which approach minimizes stored …

CS-CCCS · Security architecture

Place controls at trust boundaries

…ata or actions cross between components with different security assumptions. Map those crossings and require appropriate validation, identity checks and authorization. Layer controls so one …

CSCU · Security architecture

Place controls at trust boundaries

…ata or actions cross between components with different security assumptions. Map those crossings and require appropriate validation, identity checks and authorization. Layer controls so one …

CSCU · Security foundations

Match the control to the security objective

Confidentiality limits who can see information, integrity protects against unauthorized changes, and availability keeps services usable. A control may support several objectives, but the imm…

CSIS · Security foundations

Match the control to the security objective

Confidentiality limits who can see information, integrity protects against unauthorized changes, and availability keeps services usable. A control may support several objectives, but the imm…

CSOM · Incident response

Containment and recovery solve different problems

Containment limits ongoing damage, while eradication removes the cause and recovery restores trusted operation. These activities may overlap as new evidence appears. Preserve useful evidence…

CSOM · Technology governance

Governance sets direction and accountability

Technology governance determines priorities, decision rights and oversight so technology supports organizational objectives. Management then plans and performs the work within that direction…

CSOM · Risk assessment and treatment

Treat risk with an accountable decision

Risk combines the possibility of an unwanted event with its consequences for an objective. Identify the asset, threat and conditions before choosing a response. Controls may reduce likelihoo…

CSSLP · Secure software lifecycle

Build security into the delivery lifecycle

Security requirements belong alongside functional requirements. Model likely misuse early, use secure implementation patterns, and check changes through review and testing. Track dependencie…

CSSLP · Security architecture

Place controls at trust boundaries

…ata or actions cross between components with different security assumptions. Map those crossings and require appropriate validation, identity checks and authorization. Layer controls so one …

CSSLP · Web application security

Validate input and enforce access on the server

Browser-side checks improve usability but can be bypassed. The server must validate input and authorize the requested operation on the specific object. Keep data separate from executable que…

CySA+ · Security Operations

Beaconing is regular, small traffic to one destination

Malware that has installed on a host usually checks in with its command-and-control server on a timer, sending a tiny request every few seconds or minutes and receiving instructions. In flow…