Certified Information Systems Security Professional (CISSP) Exam Guide

Master CISSP with hands-on bonus content and practical coverage of all eight exam domains

Ted Jordan, Ric Daza, Hinne Hettema

• Publisher: Packt Publishing
• Year: 2024
• eBook ISBN: 9781800561786
• Topic: Computer Science
• Subtopic: Certification Guides in Computer Science
• Index: Computer Science

"If you're preparing for the CISSP exam, this book is a must-have. It clearly covers all domains in a structured way, simplifying complex topics. The exam-focused approach ensures you're targeting the right areas, while practical examples reinforce your learning. The exam tips and readiness drills at the end of each chapter are particularly valuable. Highly recommended for CISSP aspirants!" Bill DeLong, CISSP | CISM | CISA | IT Cybersecurity Specialist, DCMA | Cybersecurity Advisor, US Coast Guard

Key Features

• Explore up-to-date content meticulously aligned with the latest CISSP exam objectives
• Understand the value of governance, risk management, and compliance
• Unlocks access to web-based exam prep resources including mock exams, flashcards and exam tips
• Authored by seasoned professionals with extensive experience in cybersecurity and CISSP training

Book Description

The (ISC)2 CISSP exam evaluates the competencies required to secure organizations, corporations, military sites, and government entities. The comprehensive CISSP certification guide offers up-to-date coverage of the latest exam syllabus, ensuring you can approach the exam with confidence, fully equipped to succeed. Complete with interactive flashcards, invaluable exam tips, and self-assessment questions, this CISSP book helps you build and test your knowledge of all eight CISSP domains. Detailed answers and explanations for all questions will enable you to gauge your current skill level and strengthen weak areas. This guide systematically takes you through all the information you need to not only pass the CISSP exam, but also excel in your role as a security professional. Starting with the big picture of what it takes to secure the organization through asset and risk management, it delves into the specifics of securing networks and identities. Later chapters address critical aspects of vendor security, physical security, and software security. By the end of this book, you'll have mastered everything you need to pass the latest CISSP certification exam and have this valuable desktop reference tool for ongoing security needs.

What you will learn

• Get to grips with network communications and routing to secure them best
• Understand the difference between encryption and hashing
• Know how and where certificates and digital signatures are used
• Study detailed incident and change management procedures
• Manage user identities and authentication principles tested in the exam
• Familiarize yourself with the CISSP security models covered in the exam
• Discover key personnel and travel policies to keep your staff secure
• Discover how to develop secure software from the start

Who this book is for

This book is for professionals seeking to obtain the ISC2 CISSP certification. You should have experience in at least two of the following areas: GRC, change management, network administration, systems administration, physical security, database management, or software development. Additionally, a solid understanding of network administration, systems administration, and change management is essential.

]]>

Table of contents

• Certified Information Systems Security Professional (CISSP) Exam Guide
• Contributors
• Preface
• Becoming a CISSP
• Pre-Assessment Test
• Ethics, Security Concepts, and Governance Principles
• Compliance, Regulation, and Investigations
• Security Policies and Business Continuity
• Risk Management, Threat Modeling, SCRM, and SETA
• Asset and Privacy Protection
• Information and Asset Handling
• Secure Design Principles and Controls
• Architecture Vulnerabilities and Cryptography
• Facilities and Physical Security
• Network Architecture Security
• Securing Communication Channels
• Identity, Access Management, and Federation
• Identity Management Implementation
• Designing and Conducting Security Assessments
• Designing and Conducting Security Testing
• Planning for Security Operations
• Security Operations
• Disaster Recovery
• Business Continuity, Personnel, and Physical Security
• Software Development Life Cycle Security
• Software Development Security Controls
• Securing Software Development
• Secure Coding Guidelines, Third-Party Software, and Databases
• Accessing the Online Practice Resources
• Other Books You May Enjoy