WBP SI study guide
WBP SI · Work through your exam, one topic at a time.
WBP SI stands for Web-Based Platform Security Inspection. It is a professional credential for practitioners who assess the security posture of web-hosted platforms: the people who inventory internet-facing assets, review build and configuration baselines, verify whether a suspected vulnerability is genuinely exploitable, and then turn those findings into defensible evidence and a remediation plan the business will actually act on. The WBP SI study guide has 8 sections and about 2,056 words.
01Security Inspection Fundamentals and Methodology
This domain tests how you plan and govern an inspection: scoping, legal authority, methodology selection, and operational safety. Every inspection needs written authorization that names the legal entity, the in-scope assets, the testing window, and prohibited actions.
288 words, about 1 min02Asset Discovery and Inventory
This domain tests how you find known, unknown, and forgotten assets and reconcile them into an inventory you can trust. Passive discovery uses certificate transparency logs, passive DNS, WHOIS/RDAP, ASN lookups, and internet-wide scan datasets.
260 words, about 1 min03Configuration and Hardening Assessment
This domain tests whether you can compare a system against a secure baseline and distinguish misconfiguration from missing patches. Common references are CIS Benchmarks, DISA STIGs, and NIST SP 800-53 configuration management controls.
260 words, about 1 min04Vulnerability Identification and Verification
This domain tests scan operation, triage, and proof that a reported vulnerability is real and relevant. Use authenticated scans where possible; they find more and produce fewer false positives.
257 words, about 1 min05Web Application Security Testing
This domain tests manual and tool-assisted testing of web apps against OWASP WSTG and Top 10 categories. Cover authentication, session management, access control, input handling, business logic, and transport security.
264 words, about 1 min06Logging, Monitoring, and Detection Review
This domain tests whether relevant activity is logged, centralized, retained, and alerted on. Know key Windows events: 4624 successful logon, 4625 failed logon, 4688 process creation, 4720 user account created.
238 words, about 1 min07Evidence Handling and Reporting
This domain tests preservation, chain of custody, and clear reporting of findings. Capture evidence with context: URL, account, timestamp in UTC, request and response, and tool version.
238 words, about 1 min08Remediation Tracking and Compliance
This domain tests how findings move from report to verified closure and how they map to compliance obligations. Assign each finding an owner, severity, SLA, and ticket.
251 words, about 1 min