Course Catalog / Learning Path / Q/A Test Engineer

Q/A Test Engineer

Overview

The Quality Assurance (QA)/Test Engineer learning path includes a variety of security courses that will vary depending on whether you are seeking core, advanced or elite paths. It is designed for those responsible for assessing and testing the quality of specifications and technical design.

Ready to Demo? Questions about learning paths? Contact Us!

Learning Path Details

Number of Courses: 70

Total Duration: 21 hours

Total CPE Credits: 25

The Courses

View All Courses Download Learning Path Catalog Download Course Catalog

Course Catalog / Learning Path / Q/A Test Engineer

Q/A Test Engineer

Overview

Learning Path Details

The Courses

DSO 302- Automated Security Testing (Coming Soon)

TST 302 – Application Penetration Testing (NEW)

TST 301 – Infrastructure Penetration Testing (NEW)

TST 360 – Penetration Testing for Authentication Vulnerabilities

TST 359 – Penetration Testing Network Infrastructure

TST 358 – Penetration Testing Wireless Networks

TST 357 – Penetration Testing for Hardcoded Secrets

TST 356 – Penetration Testing for Cross-Site Scripting (XSS)

TST 355 – Penetration Testing for Authorization Vulnerabilities

TST 354 – Penetration Testing for Memory Corruption Vulnerabilities

TST 353 – Penetration Testing for SQL Injection

TST 352 – Penetration Testing for Injection Vulnerabilities

TST 351 – Penetration Testing for TLS Vulnerabilities

TST 202 – Penetration Testing Fundamentals

TST 205 – Performing Vulnerability Scans

COD 350 – Testing for Use of a One-way Hash without a Salt (CWE-759)

COD 349 – Testing for Integer Overflow or Wraparound (CWE-190)

COD 347 – Testing for Open Redirect (CWE-601)

COD 346 – Testing for Improper Restriction of Excessive Authentication Attempts (CWE-307)

COD 345 – Testing for Incorrect Calculation of Buffer Size (CWE-131)

COD 344 – Testing for Use of a Broken or Risky Cryptographic Algorithm (CWE-327)

COD 343 – Testing for Use of a Potentially Dangerous Function (CWE-676)

COD 342 – Testing for Incorrect Permission Assignment for Critical Resource (CWE-732)

COD 341 – Testing for Inclusion of Functionality from Untrusted Control Sphere (CWE-829)

COD 340 – Testing for Incorrect Authorization (CWE-863)

COD 339 – Testing for Download of Code without Integrity Check (CWE-494)

COD 337 – Testing for Cross Site Request Forgery (CSRF): CWE-352

COD 336 – Testing for Execution with Unnecessary Privileges (CWE-250)

COD 335 – Testing for Reliance on Untrusted Inputs in a Security Decision (CWE-807)

COD 334 – Testing for Unrestricted Upload of File with Dangerous Type (CWE-434)

COD 333 – Testing for Missing Encryption of Sensitive Data (CWE-311)

COD 332 – Testing for Use of Hard-Coded Credentials (CWE-798)

COD 331 – Testing for Missing Authorization (CWE-862)

COD 330 – Testing for Missing Authentication for Critical Function (CWE-306)

COD 329 – Testing for Cross-site Scripting (CWE-79)

COD 328 – Testing for Classic Buffer Overflow (CWE-120)

COD 327 – Testing for OS Command Injection (CWE-78)

COD 326 – Testing for SQL Injection (CWE-89)

COD 379 – Testing for OWASP 2017: Insufficient Logging & Monitoring

COD 378 – Testing for OWASP 2017: Use of Components with Known Vulnerabilities

COD 377 – Testing for OWASP 2017: Insecure Deserialization

COD 376 – Testing for OWASP 2017: Cross Site Scripting (XSS)

COD 375 – Testing for OWASP 2017: Security Misconfiguration

COD 374 – Testing for OWASP 2017: Broken Access Control

COD 373 – Testing for OWASP 2017: XML External Entities

COD 372 – Testing for OWASP 2017: Sensitive Data Exposure

COD 371 – Testing for OWASP 2017: Broken Authentication

COD 370- Testing for OWASP 2017: Injection

TST 101 – Fundamentals of Security Testing

ENG 312 – How to Perform a Security Code Review

ENG 211 – How to Create Application Security Design Requirements

ENG 205 – Fundamentals of Threat Modeling

ENG 123 – Essential Security Engineering Principles

ENG 114 – Essential Risk Assessment

DES 231 – Applying OWASP 2017: Mitigating Insufficient Logging & Monitoring Vulnerabilities

DES 230 – Applying OWASP 2017: Mitigating Use of Components with Known Vulnerabilities

DES 229 – Applying OWASP 2017: Mitigating Insecure Deserialization

DES 228 – Applying OWASP 2017: Mitigating Cross Site Scripting (XSS)

DES 227 – Applying OWASP 2017: Mitigating Security Misconfiguration

DES 226 – Applying OWASP 2017: Mitigating Broken Access Control

DES 225 – Applying OWASP 2017: Mitigating XML External Entities

DES 224 – Applying OWASP 2017: Mitigating Sensitive Data Exposure

DES 223 – Applying OWASP 2017: Mitigating Broken Authentication

DES 222 – Applying OWASP 2017: Mitigating Injection

DES 205 – Message Integrity Cryptographic Functions

DES 204 – Role of Cryptography in Application Development

DES 203 – Cryptographic Components: Randomness, Algorithms, and Key Management

DES 202 – Cryptographic Suite Services: Encoding, Encrypting & Hashing

AWA 102 – Secure Software Concepts

AWA 101 – Fundamentals of Application Security