Question

This module focuses on the basics of Physical Security, Social Engineering, Network Vulnerabilities and Threats, Authentication, Secure Protocols, Remote Access Security, and Troubleshooting Network Security Issues, Network Hardening, specifically, Detection and Prevention, Penetration Testing, Incident Response and Basic Forensics.

Select one of these concepts, locate any online resource that helps you better understand the technology and how the technology is used in a production environment. You might consider the purpose, how the technology helps secure the network, or how the technology fits in the overall network architecture and operations.

Share your research by summarizing your findings, and provide links to at least two of your sources

Answer 1

In case of any queries, please revert back. Sorry, we are not supposed to provide links. I will be guiding on the following topic :-

Penetration Testing

Penetration testing, additionally called pen testing, is the act of testing a PC framework, system or web application to discover security vulnerabilities that an assailant could abuse. In any case, the procedure includes gathering data about the objective before the test, recognizing conceivable passage focuses, endeavoring to break in - either for all intents and purposes or seriously - and announcing back the discoveries.

The fundamental target of penetration testing is to recognize security shortcomings. Penetration testing can likewise be utilized to test an association's security strategy, its adherence to consistence prerequisites, its workers' security mindfulness and the association's capacity to recognize and react to security episodes. Regularly, the data about security shortcomings that are distinguished or abused through pen testing is totaled and given to the association's IT and system framework supervisors, empowering them to put forth vital choices and organize remediation attempts. Penetration tests are likewise once in a while called white cap assaults in light of the fact that in a pen test, the heroes are endeavoring to break in.

Associations ought to perform pen testing routinely, in a perfect world, when a year, to guarantee progressively steady system security and IT management.Pen analyzers frequently utilize robotized apparatuses to reveal standard application vulnerabilities. Pen testing instruments inspect information encryption procedures and can recognize hard-coded values, for example, usernames and passwords, to confirm security vulnerabilities in the framework. One significant part of any penetration testing program is characterizing the extension inside which the pen analyzers must work. Ordinarily, the degree characterizes what frameworks, areas, strategies and devices can be utilized in a penetration test. Constraining the extent of the penetration test assists center with joining individuals and protectors on the frameworks over which the association has control. Penetration instruments filter code so as to character noxious code in applications that could bring about a security break.

Penetration Testing is primarily required for
1. Money related or basic information must be made sure about while moving it between various frameworks or over the system.
2. Numerous customers are requesting pen testing as a feature of the product discharge cycle.
3. To make sure about client information.
4. To discover security vulnerabilities in an application.
5. To find escape clauses in the framework.
6. To survey the business effect of fruitful assaults.
7. To meet the data security consistence in the association.
8. To execute a compelling security technique in the association.