DEV Community

Cover image for CISSP modules and how to pass the examination like a pro
arpitteacher
arpitteacher

Posted on

CISSP modules and how to pass the examination like a pro

CISSP modules and how to pass the examination like a pro!!
Certified information system Security Professional or CISSP is a technically orientated course that covers a broader spectrum of critical security topics like security risk management.

Certified information system Security Professional, is a globally recognized certification provided. The course covers 8 modules as a part of the syllabus. The CISSP training certification helps in validating the professional for his or her skills, knowledge, and knowledge to manage security architects of a corporation.

The CISSP Common Body of Knowledge (CBK) features a collection of 8 modules that cover aspects of security information. A candidate to secure the certification must gain expertise in CBK.

8 modules of CISSP

Security and Risk Management
Asset Security
Security Architecture and Engineering
Communications and Network Security
Identity and Access Management
Security Assessment and Testing
Security Operations
Software Development Security

Candidates must be able to prove that they have a minimum of 5 years of
paid work experience in 3 or more domains mentioned in (ISC)2 CISSP.

1) Security and Risk Management
This is the foremost important domain in CISSP, providing a comprehensive overview of the things you'd wish to understand about information systems management. It covers:
The confidentiality, integrity, and availability of information
Security governance principles
Compliance requirements
Legal and regulatory issues regarding information security
IT policies and procedures
Risk-based management concepts

2) Asset Security
This domain addresses the physical requirements of information security. It covers:
The classification and ownership of information and assets
Privacy
Retention periods
Data security controls
Handling requirements

3) Security Architecture and Engineering
This domain covers several important information security concepts, including:
Engineering processes using secure design principles
Fundamental concepts of security models
Security capabilities of information systems
Assessing and mitigating vulnerabilities in systems
Cryptography
Designing and implementing physical security

4) Communications and Network Security
This domain covers the design and protection of an organization’s networks. This includes:
Secure design principles for network architecture
Secure network components
Secure communication channels

5) Identity and Access Management

This domain helps information security professionals understand the way to control the way users can access data. It covers:
Physical and logical access to assets
Identification and authentication
Integrating identity as a service and third-party identity services
Authorization mechanisms
The identity and access provisioning lifecycle

6) Security Assessment and Testing
This domain focuses on the design, performance, and analysis of security testing. It includes:
Designing and validating assessment and test strategies
Security control testing
Collecting security process data
Test outputs
Internal and third-party security audits

7) Security Operations
This domain addresses the way plans are put into action. It covers:
Understanding and supporting investigations
Requirements for investigation types
Logging and monitoring activities
Securing the supply of resources
Foundational security operations concepts
Applying resource protection techniques
Incident management
Disaster recovery
Managing physical security
Business continuity

8) Software Development Security
This domain helps professionals to know, apply and enforce software security. It covers:
Security within the software development life cycle
Security controls in development environments
The effectiveness of software security
Secure coding guidelines and standards

Domains
Percentage
Security and Risk Management

15%
Asset Security
10%
Security Engineering
13%
Communications and Network Security
14%
Identity and Access Management
13%
Security Assessment and Testing
12%
Security Operations
13%
Software Development Security
10%

Candidates got to attend about 150 questions within the span of three hours. The passing marks for the exam are 700 out of 1000.

In order to maintain the credibility of the CISSP certification candidates need to:-
Must maintain membership with (ISC)2
Members need to pay an annual membership fee
Earn 120CPEs per annum

People can also start applying for big MNC's by reading tutorials on CISSP interview questions.

Top comments (2)

Collapse
 
ameliaava_123 profile image
Grace M Overman

Luckily I discovered this website certifiedumps ten days before the exam and I managed to pass it with 906/1000. 90% of the questions were in the exam. Their exam dumps saved me. Highly recommended for exam practice.

Collapse
 
cukirk profile image
Cukirk

Great