Download Safari Books Online apps: Apple iOS | Android

Entire Site

Safari Books Online

    Free Trial

    Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.

    Start ReadingShareBuy Print Version
    CISSP Rapid Review

    • CISSP Rapid Review

    • By:

    • Publisher: Microsoft Press

    • Pub. Date:

    • Print ISBN-13: 978-0-7356-6678-8

    • Pages in Print Edition: 300

    • Subscriber Rating: 0 out of 5 rating0 [0 Ratings]

    1ebooken
    Subscriber Reviews • Browse Similar Topics

    Overview

    Assess your readiness for the CISSP Exam—and quickly identify where you need to focus and practice. This practical, streamlined guide provides objective overviews, exam tips, "need-to-know" checklists, review questions, and a list of valuable resources—all designed to help evaluate and reinforce your preparation.

    Subscriber Reviews

    Average Rating: 0 out of 5 rating Based on 0 Ratings

    No Subscribers have provided a review for this book.

    Table of Contents

     

    View Sample

    CISSP Rapid Review

    View Sample
    Introduction
    View Sample

    (ISC)2 professional certification program

    View Sample

    Acknowledgments

    View Sample

    Support & feedback

    View Sample
    1. Access Control
    View Sample

    Objective 1.1: Control access by applying the following concepts/methodologies/techniques

    View Sample

    Objective 1.2: Understand access control attacks

    View Sample

    Objective 1.3: Assess effectiveness of access controls

    View Sample

    Objective 1.4: Identity and access provisioning lifecycle (e.g., provisioning, review, revocation)

    View Sample

    Answers

    View Sample
    2. Telecommunications and Network Security
    View Sample

    Objective 2.1: Understand secure network architecture and design (e.g., IP & non-IP protocols, segmentation)

    View Sample

    Objective 2.2: Securing network components

    View Sample

    Objective 2.3: Establish secure communication channels (e.g., VPN, TLS/SSL, VLAN)

    View Sample

    Objective 2.4: Understand network attacks (e.g., DDoS, spoofing)

    View Sample

    Answers

    View Sample
    3. Information Security Governance & Risk Management
    View Sample

    Objective 3.1: Understand and align security function to goals, mission, and objectives of the organization

    View Sample

    Objective 3.2: Understand and apply security governance

    View Sample

    Objective 3.3: Understand and apply concepts of confidentiality, integrity, and availability

    View Sample

    Objective 3.4: Develop and implement security policy

    View Sample

    Objective 3.5: Manage the information lifecycle (e.g., classification, categorization, and ownership)

    View Sample

    Objective 3.6: Manage third-party governance (e.g., on-site assessment, document exchange and review, process/policy review)

    View Sample

    Objective 3.7: Understand and apply risk management concepts

    View Sample

    Objective 3.8: Manage personnel security

    View Sample

    Objective 3.9: Develop and manage security education, training, and awareness

    View Sample

    Objective 3.10: Manage the security function

    View Sample

    Answers

    View Sample
    4. Software Development Security
    View Sample

    Objective 4.1: Understand and apply security in the software development lifecycle

    View Sample

    Objective 4.2: Understand the environment and security controls

    View Sample

    Objective 4.3: Assess the effectiveness of software security

    View Sample

    Answers

    View Sample
    5. Cryptography
    View Sample

    Objective 5.1: Understand the application and use of cryptography

    View Sample

    Objective 5.2: Understand the cryptographic lifecycle (e.g., cryptographic limitations, algorithm/protocol governance)

    View Sample

    Objective 5.3: Understand encryption concepts

    View Sample

    Objective 5.4: Understand key management processes

    View Sample

    Objective 5.5: Understand digital signatures

    View Sample

    Objective 5.6: Understand non-repudiation

    View Sample

    Objective 5.7: Understand methods of cryptanalytic attacks

    View Sample

    Objective 5.8: Use cryptography to maintain network security

    View Sample

    Objective 5.9: Use cryptography to maintain application security

    View Sample

    Objective 5.10: Understand Public Key Infrastructure (PKI)

    View Sample

    Objective 5.11: Understand certificate related issues

    View Sample

    Objective 5.12: Understand information hiding alternatives (e.g., steganography, watermarking)

    View Sample

    Answers

    View Sample
    6. Security Architecture & Design
    View Sample

    Objective 6.1: Understand the fundamental concepts of security models (e.g., Confidentiality, Integrity, and Multi-level Models)

    View Sample

    Objective 6.2: Understand the components of information systems security evaluation models

    View Sample

    Objective 6.3: Understand security capabilities of information systems (e.g., memory protection, virtualization, Trusted Platform Module)

    View Sample

    Objective 6.4: Understand the vulnerabilities of security architectures

    View Sample

    Objective 6.5: Understand software and system vulnerabilities and threats

    View Sample

    Objective 6.6: Understand countermeasure principles (e.g., defense in depth)

    View Sample

    Answers

    View Sample
    7. Operations Security
    View Sample

    Objective 7.1: Understand security operations concepts

    View Sample

    Objective 7.2: Employ resource protection

    View Sample

    Objective 7.3: Manage incident response

    View Sample

    Objective 7.4: Implement preventative measures against attacks (e.g., malicious code, zero-day exploit, denial of service)

    View Sample

    Objective 7.5: Implement and support patch and vulnerability management

    View Sample

    Objective 7.6: Understand change and configuration management (e.g., versioning, base lining)

    View Sample

    Objective 7.7: Understand system resilience and fault tolerance requirements

    View Sample

    Answers

    View Sample
    8. Business Continuity & Disaster Recovery Planning
    View Sample

    Objective 8.1: Understand business continuity requirements

    View Sample

    Objective 8.2: Conduct business impact analysis

    View Sample

    Objective 8.3: Develop a recovery strategy

    View Sample

    Objective 8.4: Understand disaster recovery process

    View Sample

    Objective 8.5: Exercise, assess, and maintain the plan (e.g., version control, distribution)

    View Sample

    Answers

    View Sample
    9. Legal, Regulations, Investigations, and Compliance
    View Sample

    Objective 9.1: Understand legal issues that pertain to information security internationally

    View Sample

    Objective 9.2: Understand professional ethics

    View Sample

    Objective 9.3: Understand and support investigations

    View Sample

    Objective 9.4: Understand forensic procedures

    View Sample

    Objective 9.5: Understand compliance requirements and procedures

    View Sample

    Objective 9.6: Ensure security in contractual agreements and procurement processes (e.g., cloud computing, outsourcing, vendor governance)

    View Sample

    Answers

    View Sample
    10. Physical (Environmental) Security
    View Sample

    Objective 10.1: Understand site and facility design considerations

    View Sample

    Objective 10.2: Support the implementation and operation of perimeter security (e.g., physical access control and monitoring, audit trails/access logs)

    View Sample

    Objective 10.3: Support the implementation and operation of internal security (e.g., escort requirements/visitor control, keys and locks)

    View Sample

    Objective 10.4: Support the implementation and operation of facilities security (e.g., technology convergence)

    View Sample

    Objective 10.5: Support the protection and securing of equipment

    View Sample

    Objective 10.6: Understand personnel privacy and safety (e.g., duress, travel, monitoring)

    View Sample

    Answers

    View Sample

    Index

    View Sample

    About the Author

    View Sample

    Copyright

    Extras

    The publisher has provided additional content related to this title.


    Description
    Content

    Visit the catalog page for CISSP Rapid Review

    • Catalog Page

    Visit the errata page for CISSP Rapid Review

    • Errata