CISSP-Important Recap Before Exam | Domain 3-4-5

Explore security architecture and engineering concepts, cryptography goals of confidentiality, integrity, and non-repudiation, and the roles of symmetric, asymmetric, and hybrid cryptography, including key distribution.

This domain recap covers cryptographic foundations, including protection profiles, hashing, digital signatures, certificates, PKI, TLS/SSL, IPsec, key management, and common attacks to secure information systems.

Explore security architecture, the security perimeter, and access control models like Biba, Clarke Wilson, and information flow, plus certification, accreditation, and Common Criteria evaluation.

Explore data security fundamentals: aggregation, data warehousing and mining, data dictionary, and analytics, plus mobile security controls, zero trust, privacy by design, and audit trails.

Analyze domain three concepts, from fire suppression and water-deluge systems to physical and internal security controls, including access management, motion detectors, alarms, and incident response practices.

Implement network access control by enforcing authentication, authorization, and accounting, using x.509 digital certificates and two-factor authentication, while configuring VPN with radius and diameter protocols.

Explore domain 4 security topics, including cloud access security broker, cloud data discovery, USA reference model layer attacks, social engineering, DNS spoofing, DoS, and breach and attack simulation.

Explore identity and access management concepts, including centralized and decentralized administration, separation of duties, least privilege, need-to-know, and multi-factor authentication, plus various access control models and saml-based authentication.

Explore access control concepts, authentication methods, and password security, including multifactor authentication, password attacks, and open authentication frameworks, with emphasis on least privilege and onboarding and offboarding processes.