OVAL
Open Vulnerability and Assessment Language
A standardized XML language for describing system state to test for vulnerabilities and configuration.
OVAL is a community standard, part of the SCAP suite, that expresses how to check a system's configuration and patch state in a machine-readable way so scanners produce consistent, comparable results. It separates the definition of what to check from the tool that performs the check, improving interoperability across vendors. Assessors use OVAL content alongside CVE and CCE identifiers to automate compliance and vulnerability evaluation. For the exam, file OVAL under standardized, automated security assessment.
Looking OVAL up is step one. Getting tested on it is step two.
A free account opens all 4 Domain 1 objectives, 271 exam-style questions with a lesson and a lab on each, a placement check that skips what you already know, and a dated plan. No card.
Not affiliated with or endorsed by CompTIA.