No system is ever free of weaknesses, so the question is whether you find them before an attacker does. Vulnerability management is the ongoing process of discovering, assessing, prioritising, fixing and verifying those weaknesses. You'll start with the vulnerability management lifecycle, vulnerability scanning, and how CVE identifiers and CVSS scores describe what has been found.
Next, you'll learn why severity alone is not enough and how EPSS and the CISA KEV catalogue help you fix what is most likely to be attacked first. Then you'll move from finding weaknesses to proving them with penetration testing: the stages of a test, scanning networks with Nmap, and exploitation with the Metasploit Framework. Only test systems you own or have written permission to test.
Once you can find and prove weaknesses, you'll be ready for the next module, Cloud & Container Security, where you secure the platforms modern applications run on.
What vulnerability management is and how it differs from patch management, plus the lifecycle, scanning methods, CVE and CVSS scoring, and remediation. A long lesson with chapters, so use them to jump around.
Why you cannot patch every CVE, and how combining severity (CVSS), likelihood of attack (EPSS) and known exploitation (KEV) with asset criticality gives a defensible patching policy.
A short introduction to ethical hacking: why organisations run pen tests, the benefits and challenges, and the stages from reconnaissance and exploitation through to reporting.
A hands-on walkthrough of Nmap: host discovery, port scanning, service and OS detection, TCP versus UDP scans, and the most common commands. Always get permission before scanning.
How the Metasploit Framework is organised, including modules, exploits and payloads, and how testers use it to confirm that a vulnerability can really be exploited.