Certified Information Systems Security Professional (CISSP) Exam Guide: Become a certified CISSP professional with practical exam-oriented knowledge of all eight domains

Master the skills to safeguard information assets in a dynamic digital landscape and achieve your CISSP certification

Purchase of this book unlocks access to online exam resources such as practice questions, flashcards, exam tips, and the eBook PDF

Key Features

• Explore up-to-date content meticulously aligned with the latest CISSP exam objectives
• Understand the value of governance, risk management, and compliance
• Assess your exam readiness with practice questions that match exam-level difficulty

Book Description

The (ISC)2 CISSP exam evaluates the competencies required to secure organizations, corporations, military sites, and government entities. The comprehensive CISSP certification guide offers up-to-date coverage of the latest exam syllabus, ensuring you can approach the exam with confidence, fully equipped to succeed.

Complete with interactive flashcards, invaluable exam tips, and self-assessment questions, this book helps you build and test your knowledge of all eight CISSP domains. Detailed answers and explanations for all questions will enable you to gauge your current skill level and strengthen weak areas.

This guide systematically takes you through all the information you need to not only pass the CISSP exam, but also excel in your role as a security professional. Starting with the big picture of what it takes to secure the organization through asset and risk management, it delves into the specifics of securing networks and identities. Later chapters address critical aspects of vendor security, physical security, and software security.

By the end of this book, you’ll have mastered everything you need to pass the latest CISSP certification exam and have this valuable desktop reference tool for ongoing security needs.

What you will learn

• Get to grips with network communications and routing to secure them best
• Understand the difference between encryption and hashing
• Know how and where certificates and digital signatures are used
• Study detailed incident and change management procedures
• Manage user identities and authentication principles tested in the exam
• Familiarize yourself with the CISSP security models covered in the exam
• Discover key personnel and travel policies to keep your staff secure
• Discover how to develop secure software from the start

Who this book is for

This book is for professionals seeking to obtain the ISC2 CISSP certification. You should have experience in at least two of the following areas: GRC, change management, network administration, systems administration, physical security, database management, or software development. Additionally, a solid understanding of network administration, systems administration, and change management is essential.

Table of Contents

1. Ethics, Security Concepts, and Governance Principles
2. Compliance, Regulation, and Investigations
3. Security Policies and Business Continuity
4. Risk Management, Threat Modeling, SCRM, and SETA
5. Asset and Privacy Protection
6. Information and Asset Handling
7. Secure Design Principles and Controls
8. Architecture Vulnerabilities and Cryptography
9. Facilities and Physical Security
10. Network Architecture Security
11. Securing Communication Channels
12. Identity, Access Management, and Federation
13. Identity Management Implementation
14. Designing and Conducting Security Assessments
15. Designing and Conducting Security Testing
16. Planning for Security Operations
17. Security Operations
18. Disaster Recovery
19. Business Continuity, Personnel, and Physical Security