8 Domains All In One - The Complete CISSP Guide

Explore the eight CISSP domains, recognized by ISC squared, and learn exam structure, scoring, and formats: multiple choice, drag-and-drop, and hotspots, for a 250-question, six-hour test with 700 passing score.

Explore and understand the three CISSP exam question types—multiple choice, drag-and-drop, and hot spot—and practice with fill-in-the-blank and scenario-based items to strengthen exam readiness.

Practice hotspot and drag-and-drop questions to identify the patent symbol as the marker for intellectual property protection, and review incident response steps with red team and blue team scenarios.

Master cissp exam strategies by reading questions carefully, recognizing what is asked, eliminating wrong answers, and answering every question within six hours with careful comprehension.

Relax, breathe deeply, and approach the CISSP exam with a positive attitude; schedule for your best time of day, wear comfortable clothing, and reward yourself after the journey.

Explore the security and risk management domain, covering confidentiality, integrity, availability, governance, privacy, and regulatory considerations, with emphasis on quantitative risk assessments and business impact analysis.

Compare quantitative and qualitative risk assessments, focusing on likelihood and impact, and memorize key calculations like SLA, ALE, and CBA to assess asset value, exposure factor, and mitigating effects.

Explore the quantitative risk assessment process, calculating asset value, exposure factor, SLR, ARO, and ALE, then evaluate mitigating controls and cost-benefit outcomes through a case study.

Learn the business impact analysis (bia) to guide investment decisions and the development of incident response and business continuity plans, including mtd, rpo, wri, and rto, with a gap analysis.

Analyze a time bank case to apply a business impact analysis, defining maximum tolerable downtime and rpo/rto while assessing gaps between current replication and recovery capabilities.

domain one security and risk management exam practice walks through qualitative and quantitative risk assessments, key formulas, asset value, exposure factor, and cost-benefit calculations.

learn to calculate single loss expectancy and asset value with exposure factor, and to differentiate rto, rpo, and mtd within a business impact analysis to inform disaster recovery.

Explore the asset security domain ccbc, focusing on classifying, managing, securing and protecting information assets and their lifecycle, with archiving and end-of-life emphasis, plus ten exam-style questions.

Define privacy as the right to control personal information, and explore key concepts like PII and OECD privacy principles, including collection limitation, data quality, purpose specification, and accountability.

Explore privacy laws and compliance across health, international, and online data, including HIPAA, GBA, FPA, COPA, FERPA, EU data protection directive, EU cookie law, PII vs NPI, and breach notification.

Explore information lifecycle management, from data collection to destruction, including retention, archiving, legal holds, and e-discovery. Learn secure deletion methods, wiping, degassing, shredding, and the DoD 5220.22-M standard.

Explore information lifecycle management through a hospital case study, differentiating replication, archiving, and retention under HIPAA, and review legal hold and e-discovery for destruction of magnetic and solid state drives.

Work through ten asset security questions in various formats to identify legally protected data. Explore HIPAA, COPA, PCI DSS, GLB, and privacy concepts to classify data by privacy protection.

Learn how to handle legal holds and archive current and future correspondence. Clarify archiving versus backup and retention policies for asset security in CISSP domain 2.

Explore the security engineering domain, covering security models, cloud, web, mobile and remote vulnerabilities, cryptography basics; ends with a case study and 25 exam practice questions focusing on test-taking strategies.

Explain star and simple properties and apply Bell-LaPadula and Biba models to enforce confidentiality and integrity with no read up, no write down, no read down, and no write up.

Define cipher and algorithm, explain how text becomes cipher text, and compare key space, 8-bit versus 256-bit keys, substitution and transposition, and stream versus block ciphers like XOR and RC4.

Examine block ciphers, ECB and CBC modes, and DES, triple DES, and AES; compare block and key sizes, rounds, and practical pitfalls for data at rest.

Explain symmetric encryption with a single shared key and asymmetric encryption with a public-private key pair, including ECC as the government standard.

Learn how asymmetric encryption uses a public key and private key to encrypt and decrypt messages, and why hybrid flows combine a symmetric session key with public-key exchange for efficiency.

Encrypt messages securely using a hybrid method by sharing a session key: encrypt the session key with Mary's public key and decrypt with her private key, enabling symmetric decryption.

Explore how hash functions provide one-way fingerprints for text, ensure integrity, and how collisions and birthday attacks threaten reliability, with examples of MD5, SHA, HAVAL, and TIGER.

Learn how hashed MAC and HMAC use a secret key to ensure integrity and origin authentication, compare message digests, and why SHA-2 outperforms MD5 in secure hashing.

Understand how a digitally signed message uses a hash (message digest) encrypted with the sender’s private key to ensure integrity and non repudiation, verified by recipient with the public key.

Explore the digital certificate lifecycle, from issuer roles (certificate authority and registration authority) to issuing, embedding the public key, and revocation via CRL or online certificate status protocol.

Explore cryptographic communication protocols and transmission modes to secure information flow. Distinguish link encryption from end-to-end encryption, review SSL, TLS, HTTPS, SSH, SFTP, FTP, S/MIME, and IPsec.

Explore IPsec, a suite protecting IP communications with authentication, integrity, encryption, and non repudiation. Learn transport and tunnel modes, and the AH, ESP, IKE, SA, and SPI components.

Explore cryptanalysis and key attacks, from ciphertext-only to chosen ciphertext. Assess work factors and methods like brute force, dictionary frequency, and differential attacks, plus collision and rainbow hash attacks.

Evaluate crypto attack defenses for confidentiality and integrity, critique DES and MD-based hashing, propose AES and SHA-2, discuss ciphertext exposure, and emphasize social engineering training.

Learn how database security objectives—integrity, availability, confidentiality, and privacy—drive techniques such as semantic integrity, commit operations, transaction recovery, access controls, data warehousing, mining, aggregation, and inference.

Learn how injection attacks like SQL injection arise from unvalidated input and output, and discover defenses such as input and output validation to safeguard databases.

A 25-question domain 3 practice exam on security architecture and engineering covers Biba, Bell-LaPadula, star and simple properties, and key space concepts.

Explore domain 3 concepts of cryptographic key pairs, public and private keys, symmetric versus asymmetric encryption, hashing, digital signatures, and certificate authorities to evaluate security architecture.

Explore the domain of communication and network security, covering OSI and TCP/IP models, VoIP and 802.11 wireless networks, network attacks, and case studies with practice questions.

Learn how OSI's seven layers and TCP/IP's four layers map to real networks, from physical to application, and how layer two versus layer three switches affect forwarding and routing.

Learn how decision engines use pattern matching and behavior decisions, with four decision states: true positives, true negatives, false positives, and false negatives.

Explore mpls as a scalable, protocol-independent transport architecture using labels, compare dnp3 for industrial control, and apply fco for high-speed storage traffic in a multi-location law firm case study.

Explore voice over IP fundamentals, including SIP and H.323, IP convergence and IP telephony, with emphasis on security functions: integrity, encryption (TLS), privacy, RTP transport, and PLC.

Explore wireless modes and network configurations, including ad hoc and infrastructure topologies, and compare 802.11 standards (a/b/g/n) with security (802.11i) and QoS (802.11e) considerations.

Trace 802.11 security evolution from wep to wpa2, noting authentication, key management, wifi protected setup vulnerability, and vector attacks such as discovery, rogue ap, mac impersonation, and denial of service.

Identify and describe network attack techniques such as scanning, sniffing, poisoning, spoofing, and session hijacking, and explain their impact on confidentiality, integrity, and availability.

Tackle domain 4 questions on communication and network security. Learn about false negatives in anomaly detection, MPLS, convergence, SIP and VOIP, WPA2 security, and spoofing mitigation through training.

Explore the core concepts of identity and access management, including identification, authentication, authorisation, accountability, and access controls, with mutual authentication, Kerberos, federated identity management, case studies, and exam practice questions.

Compare CHAP with zero knowledge proof for password-based authentication, then explore mutual authentication with Kerberos and Sesame, detailing key distribution centers, realms, and the separation of authentication from authorization.

Explore Kerberos authentication, including TGT, TGS, session tickets, KDC, and mutual authentication with the resource server. Compare Sesame, a multi vendor SSO using symmetric and asymmetric keys with PAX certificates.

Understand federated identity management, including SAML, OAuth, and OpenID Connect, and how identity providers and service providers enable authentication and authorization across resources.

Explore access control models such as MAC, DAC, RBAC, rule-based, content-based, context-based, and constrained interfaces, with enforcement by ACLs, capabilities, and security labels, plus a town hospital case study.

Assess how authorization grants permission to perform actions and distinguish it from authentication. Explore Kerberos, ticket granting tickets, and soap concepts presented in domain 5 IAM questions.

Explore the security assessment and testing domain, including assurance, planning, examination, testing, continuous monitoring, penetration testing, rules of engagement, SSA 16 reports, and the information security continuous monitoring process.

Understand how rules of engagement define testing parameters, knowledge level, notification, data handling, and reporting, and compare approaches: external untrusted, external trusted, internal untrusted, internal trusted, and tenant to tenant.

Explore how organizational knowledge and testing team knowledge drive rules of engagement for overt and covert testing, including zero to hybrid knowledge levels and incident detection.

Explore how audit examinations rely on evidence and testing. Compare soc versions soc one, soc two, soc three with type one and type two, anchored by ssae16 trust principles.

Understand information security continuous monitoring (ICM) per NIST and FISMA, and how security automation across domains including vulnerability, asset, configuration, incident management, SCAP, and NVD drives risk decisions.

Demystifies domain 6 questions by clarifying rules of engagement and what is typically included, such as reporting expectations and data handling.

Explore domain 6 security assessment and testing concepts, including AICPA trust principles, FISMA, SOC reports, SCAP, CVEs, and the NVD maintained by NIST.

Explore the security operations tasks, including vulnerability change and configuration management, incident response, disaster recovery investigations, resiliency and fault tolerance, digital forensics and evidence handling, and protecting people and places.

Learn the configuration management process by establishing a baseline configuration and applying controlled changes through change management, monitoring impacts, and iterative cycles.

Learn how to identify, mitigate, and respond to vulnerabilities using threat intelligence to shift from reactive to proactive security through asset inventory, threat intake, and change, configuration, and patch management.

Explore resiliency and fault tolerance, including failover, high availability, active passive and active active configurations, RAID levels 0, 1, 5, 6, 10, and full, differential, and incremental backups with replication.

Explore automated backup strategies like disk shadowing on multiple disks, electronic vaulting, and remote journaling, plus replication options such as point-in-time, synchronous, and asynchronous replication.

Learn evidence handling and chain of custody across criminal, civil, and internal investigations, treating each case as court-bound, and grasp digital forensics from collection to archiving, including memory imaging.

Explore file recovery concepts, carving deleted fragments, and metadata types (file system, application, pseudo), then examine steganography and steganalysis techniques with a forensic evidence case.

Apply crime prevention through environmental design to reduce incidents and fear. Identify conventional, cipher, electronic, biometric, proximity, and photoelectric locks and sensors, and compare fail safe with fail secure.

Explore social engineering, its common attacks—pretexting, baiting, phishing, vishing, smishing, duress, shoulder surfing, piggybacking—and a workplace case study to recognize and mitigate threats through user training.

Explores the relationship between change management and configuration management, emphasizing baselines, and identifies zero-day threats, vulnerability management, threat intelligence workflow, patch management, and graceful standby failover concepts.

Explore the software development security domain, focusing on source code flaws, vulnerabilities, and testing. Learn the product development lifecycle with case studies and ten exam practice questions for test-taking strategies.

Explore the top web vulnerabilities from OWASP, focusing on injection, broken authentication, and cross-site scripting, and learn defenses like input/output validation and stored procedures for secure applications.

Explore persistent xss and reflected xss, showing how vulnerable pages inject or reflect scripts that run in a victim's browser and compromise systems.

Explore sequential and iterative project development models, including waterfall, spiral, rad, and agile, plus ipd and devops, and master key testing modes from unit to regression.

Compare positive and negative testing, using use and misuse cases to validate inputs, while applying multi-condition and path coverage across unit, integration, vulnerability, and acceptance testing.

Explore the enhanced product development lifecycle, including security and privacy requirements, threat modeling, and testing, and learn how vulnerability disclosure, bug bounties, and CVE databases drive secure releases.

Engage in exam-style practice on software development security, identifying client-side cross-site scripting, SQL injection, and broken authentication, and applying input and output validation to prevent injections.

Compare linear waterfall with iterative models such as agile. Review testing types—negative, unit, integration, acceptance—and DevOps, plus bug bounty rewards and ethics canons.