CISSP Exam Study Guide

Pass the CISSP exam: 171 flashcards, 229 practice questions, a term-matching game, a searchable glossary, and 44 security models & frameworks.

Prepare for the ISC2 Certified Information Systems Security Professional (CISSP) exam with a focused, comprehensive study companion aligned to the current exam blueprint (effective April 15, 2024).

CISSP Study Guide organizes everything into the 8 exam domains — Security and Risk Management; Asset Security; Security Architecture and Engineering; Communication and Network Security; Identity and Access Management (IAM); Security Assessment and Testing; Security Operations; and Software Development Security — so you study exactly what the exam tests.

FIVE WAYS TO STUDY

• 171 flashcards — tap to flip, tagged by exam domain
• 127 multiple-choice practice questions with instant feedback and fully worked solutions
• 102 true/false questions targeting the misconceptions that cost exam points
• Key-term matching game — race to pair every term with its definition, in rounds of five
• 116 searchable glossary terms and 44 security models & frameworks with components and exam notes

TOPICS COVERED

• Security and Risk Management: the CIA triad, governance, risk treatment, ALE/SLE/ARO quantitative risk, policies vs. standards vs. guidelines, BCP/DRP, ethics, and legal frameworks
• Asset Security: data classification, ownership roles, data lifecycle, retention, and protection methods
• Security Architecture and Engineering: security models (Bell-LaPadula, Biba, Clark-Wilson), cryptography, PKI, secure design, and physical security
• Communication and Network Security: OSI/TCP-IP, secure protocols, network attacks, and segmentation
• Identity and Access Management: authentication factors, biometrics, access control models, Kerberos, SSO, and federation
• Security Assessment and Testing: vulnerability assessment vs. penetration testing, SAST/DAST, log review, and SOC reports
• Security Operations: digital forensics, incident response, logging and monitoring, backups and RAID, and disaster recovery
• Software Development Security: the SDLC, DevSecOps, the OWASP Top 10, secure coding, and database security

Start free with a preview of every section. Unlock Premium with a one-time lifetime purchase or a low monthly subscription — both include the entire question bank, glossary, and models & frameworks library.

This app is an independent study aid and is not affiliated with, endorsed by, or sponsored by ISC2. CISSP and Certified Information Systems Security Professional are registered trademarks of ISC2. Always verify current exam content at isc2.org.

SUBSCRIPTION & TERMS Premium unlocks every flashcard, practice question, glossary entry, and reference section. Two options:

• Premium Monthly: $1.99 per month, auto-renewing subscription
• Premium Lifetime: $15.00 one-time purchase, not a subscription

Payment is charged to your Apple Account at confirmation of purchase. A monthly subscription renews automatically unless auto-renew is turned off at least 24 hours before the end of the current period; your account is charged for renewal within 24 hours before the current period ends. You can manage or cancel your subscription in your Apple Account settings after purchase.

Terms of Use (EULA): https://www.apple.com/legal/internet-services/itunes/dev/stdeula/ Privacy Policy: https://www.dmpenterprisellc.com/privacy-policy