Lesson 4: Vulnerabilities and Threat Intelligence
Week of Tue, Oct 6 · lesson closes Mon, Oct 12
Take Meerk's quiz for Lesson 4
This lesson's items
Exact due times are in Canvas.
Watch — Professor Messer
Watch — Professor Messer: Vulnerability Management (SY0-701)
Free, independent educational resource. Not affiliated with or endorsed by CompTIA. Watch, then read the notes below.
Know these cold
- CVE (Common Vulnerabilities and Exposures): public database of known vulnerabilities, each with a CVE ID and CVSS score (0–10). CVSS ≥ 9.0 = Critical.
- Vulnerability scanning: automated tools identify known weaknesses — output is a list of findings, not exploits. Penetration testing actively exploits vulnerabilities to measure real-world risk.
- Threat intelligence feeds: STIX/TAXII framework for sharing threat data. MITRE ATT&CK documents TTPs used in real attacks.
Meerk's quiz — open the Lesson 4 gate
10 questions, no time limit. 85% on your first attempt in a 24-hour window opens the gate. Retakes inside the window are practice — they help you learn, they don't count. Work alone; the point is to know it, not to have seen it.
Dinner Table Question
Ask at home: Why would a company hire someone to hack their own systems?
En español: ¿Por qué una empresa contrataría a alguien para hackear sus propios sistemas?