Browse › Critical Security Controls
Creation of Standard Operating Procedures for Recovery
Part of Critical Security Controls · Cyber Security Professional Topic: Blue Team
Counts towards
Access
Included in StationX Membership — unlimited attempts
🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
Already have access? Sign in.
New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.
What you'll do
Students will have access to the results of a vulnerability scan run again a sample Windows 2008 Server.
- They will perform any necessary remediations to the server by applying a variety of patches, systems/firewall tweaks in order to further harden it
- They will run a follow-up scan to ensure that the previously discovered weaknesses have been mitigated down to a reasonable level of risk
- After the verification scan has been completed, they will then author a Standard Operating Procedure to help others walk through the same mitigation process they went through - enabling others to perform the same…
- ⏱ About 60 minutes
- Counts towards: Certified Information Systems Auditor (exam CISA) · Certified Information Systems Security Professional (exam CISSP) · CompTIA Security+ (exam SY0-701) · ISO/IEC 27001 (ISO 27001:2022)
Scored lab. A scored lab checks your work and records a score you can see on the lab page.
Roadmaps that use this lab
- CompTIA Security+ (SY0-701) — step 7: Governance, risk and compliance
- SOC Analyst — career path — step 2: Security foundation
- Advanced Security Practice — SecurityX (CAS-005) practice labs — step 3: Enterprise risk and governance
- Advanced Security Practice — SecurityX (CAS-005) practice labs — step 4: Advanced operations
- CISSP — Certified Information Systems Security Professional — step 5: Domains 7 & 8 — operations and software security
- CISA — Certified Information Systems Auditor — step 3: Controls in practice
- CRISC — Certified in Risk and Information Systems Control — step 3: Risk response and reporting
- ISO/IEC 27001:2022 — Lead Implementer and Internal Auditor — step 3: Audit it
- Penetration Tester — career path — step 1: Security foundation
- Threat Hunter — career path — step 1: Security foundation
- Digital Forensics Analyst — career path — step 1: Security foundation
- Threat Intelligence Analyst — career path — step 1: Security foundation
- Cloud Security Engineer — career path — step 1: Security foundation
- Security Engineer — career path — step 1: Security foundation
- Security Engineer — career path — step 8: Certify it
- Security Architect — career path — step 1: Security foundation
- Security Architect — career path — step 4: Architecture at scale
- Security Architect — career path — step 5: The senior certification
- Network Security Engineer — career path — step 3: Security foundation
- Security Administrator — career path — step 3: Security foundation
- Cyber Security Manager — career path — step 1: Security foundation
- Cyber Security Manager — career path — step 5: The senior technical certification
- Cyber Security Risk Manager — career path — step 1: Security foundation
- Cyber Security Risk Manager — career path — step 3: The management system
- Cyber Security Risk Manager — career path — step 4: The risk certification
- Cyber Security Compliance Officer — career path — step 1: Security foundation
- Cyber Security Compliance Officer — career path — step 6: The standard
- Cyber Security Compliance Officer — career path — step 7: The audit certification
- AI Security Engineer — career path — step 1: Security foundation
- AI Security Engineer — career path — step 7: The senior security certification
