CISSP® Study Guide, Fourth Edition provides the latest updates on CISSP® certification, the most prestigious, globally-recognized, vendor neutral exam for information security professionals. In this new edition, readers will learn about what's included in the newest version of the exam’s Common Body of Knowledge. The eight domains are covered completely and as concisely as possible. Each domain has its own chapter, including specially designed pedagogy to help readers pass the exam. Clearly stated exam objectives, unique terms/definitions, exam warnings, learning by example, hands-on exercises, and chapter ending questions help readers fully comprehend the material.
1. Chapter 1 Introduction - p. 1 2. Chapter 2 Domain 1: Security and Risk Management - p. 11 3. Chapter 3 Domain 2: Asset Security - p. 81 4. Chapter 4 Domain 3: Security Architecture and Engineering - p. 107 5. Unique Terms and Definitions - p. 107 6. Introduction - p. 108 7. Secure Design Principles - p. 108 8. Security Models - p. 113 9. Evaluation Methods, Certification, and Accreditation - p. 120 10. Secure System Design Concepts - p. 122 11. Secure Hardware Architecture - p. 125 12. Secure Operating System and Software Architecture - p. 134 13. Virtualization, Cloud, and Distributed Computing - p. 136 14. System Vulnerabilities, Threats, and Countermeasures - p. 148 15. Cornerstone Cryptographic Concepts - p. 159 16. Types of Cryptography - p. 160 17. Cryptographic Attacks - p. 175 18. Implementing Cryptography - p. 182 19. Perimeter Defenses - p. 189 20. Site Selection, Design, and Configuration - p. 202 21. System Defenses - p. 204 22. Environmental Controls - p. 206 23. Summary of Exam Objectives - p. 216 24. Self-Test - p. 218 25. Self-Test Quick Answer Key - p. 220 26. Chapter 5 Domain 4: Communication and Network Security - p. 225 27. Chapter 6 Domain 5: Identity and Access Management (IAM) - p. 295 28. Chapter 7 Domain 6: Security Assessment and Testing - p. 337 29. Chapter 8 Domain 7: Security Operations - p. 361 30. Unique Terms and Definitions - p. 361 31. Introduction - p. 361 32. Administrative Security - p. 361 33. Forensics - p. 366 34. Incident Management - p. 374 35. Operational Preventive and Detective Controls - p. 380 36. Asset Management - p. 397 37. Continuity of Operations - p. 403 38. BCP and DRP Overview and Process - p. 411 39. Developing a BCP/DRP - p. 421 40. Backups and Availability - p. 441 41. DRP Testing, Training, and Awareness - p. 445 42. Continued BCP/DRP Maintenance - p. 449 43. Specific BCP/DRP Frameworks - p. 450 44. Summary of Exam Objectives - p. 452 45. Self-Test - p. 453 46. Self-Test Quick Answer Key - p. 455 47. Chapter 9 Domain 8: Software Development Security - p. 459 48. Appendix: Self-Test - p. 509 49. Index - p. 597
CISSP® Study Guide, Fourth Edition provides the latest updates on CISSP® certification, the most prestigious, globally-recognized, vendor neutral exam for information security professionals. In this new edition, readers will learn about what's included in the newest version of the exam’s Common Body of Knowledge. The eight domains are covered completely and as concisely as possible. Each domain has its own chapter, including specially designed pedagogy to help readers pass the exam. Clearly stated exam objectives, unique terms/definitions, exam warnings, learning by example, hands-on exercises, and chapter ending questions help readers fully comprehend the material.
1. Chapter 1 Introduction - p. 1 2. Chapter 2 Domain 1: Security and Risk Management - p. 11 3. Chapter 3 Domain 2: Asset Security - p. 81 4. Chapter 4 Domain 3: Security Architecture and Engineering - p. 107 5. Unique Terms and Definitions - p. 107 6. Introduction - p. 108 7. Secure Design Principles - p. 108 8. Security Models - p. 113 9. Evaluation Methods, Certification, and Accreditation - p. 120 10. Secure System Design Concepts - p. 122 11. Secure Hardware Architecture - p. 125 12. Secure Operating System and Software Architecture - p. 134 13. Virtualization, Cloud, and Distributed Computing - p. 136 14. System Vulnerabilities, Threats, and Countermeasures - p. 148 15. Cornerstone Cryptographic Concepts - p. 159 16. Types of Cryptography - p. 160 17. Cryptographic Attacks - p. 175 18. Implementing Cryptography - p. 182 19. Perimeter Defenses - p. 189 20. Site Selection, Design, and Configuration - p. 202 21. System Defenses - p. 204 22. Environmental Controls - p. 206 23. Summary of Exam Objectives - p. 216 24. Self-Test - p. 218 25. Self-Test Quick Answer Key - p. 220 26. Chapter 5 Domain 4: Communication and Network Security - p. 225 27. Chapter 6 Domain 5: Identity and Access Management (IAM) - p. 295 28. Chapter 7 Domain 6: Security Assessment and Testing - p. 337 29. Chapter 8 Domain 7: Security Operations - p. 361 30. Unique Terms and Definitions - p. 361 31. Introduction - p. 361 32. Administrative Security - p. 361 33. Forensics - p. 366 34. Incident Management - p. 374 35. Operational Preventive and Detective Controls - p. 380 36. Asset Management - p. 397 37. Continuity of Operations - p. 403 38. BCP and DRP Overview and Process - p. 411 39. Developing a BCP/DRP - p. 421 40. Backups and Availability - p. 441 41. DRP Testing, Training, and Awareness - p. 445 42. Continued BCP/DRP Maintenance - p. 449 43. Specific BCP/DRP Frameworks - p. 450 44. Summary of Exam Objectives - p. 452 45. Self-Test - p. 453 46. Self-Test Quick Answer Key - p. 455 47. Chapter 9 Domain 8: Software Development Security - p. 459 48. Appendix: Self-Test - p. 509 49. Index - p. 597
