CISSP - Certified Information Systems Security Professional Cheat Sheet

16 practice tests · 808 questions

Pick an answer to see if it was correct and why, then continue.

Test 1
Professional Ethics, Core Security Concepts and the Five Pillars, Security Governance Principles
40 questions
Test 2
Security Control and Risk Frameworks, Legal, Regulatory, and Privacy Requirements, Investigation Types
51 questions
Test 3
Security Policies, Standards, Procedures, and Guidelines, Business Continuity Requirements and BIA, Personnel Security Policies and Procedures
41 questions
Test 4
Risk Management Concepts, Threat Modeling Concepts and Methodologies, Supply Chain Risk Management (SCRM)
63 questions
Test 5
Security Awareness, Education, and Training, Information and Asset Classification, Secure Asset Provisioning and Inventory
38 questions
Test 6
Data Lifecycle and Data Roles, Asset Retention and Data Security Controls, Secure Design Principles
41 questions
Test 7
Fundamental Security Models, Security Capabilities of Information Systems, Vulnerabilities of Security Architectures and Designs
60 questions
Test 8
Cryptographic Solutions and Lifecycle, Cryptanalytic Attacks, Site and Facility Security Design
52 questions
Test 9
Information System Lifecycle Management, Network Models, Protocols, and Converged Protocols, Network Segmentation, Wireless, and SDN
52 questions
Test 10
Secure Network Components, Secure Communication Channels, Control of Physical and Logical Access to Assets
44 questions
Test 11
Identification and Authentication Strategy, Federated Identity and Single Sign-On, Authorization Mechanisms and Access Control Models
40 questions
Test 12
Identity and Access Provisioning Lifecycle, Assessment, Test, and Audit Strategies, Security Control Testing
47 questions
Test 13
Security Process Data, Analysis, and Reporting, Investigations and Digital Forensics, Logging and Monitoring Activities
41 questions
Test 14
Configuration and Change Management, Foundational Security Operations Concepts, Incident Management
48 questions
Test 15
Detective and Preventive Measures, Recovery Strategies and High Availability, Disaster Recovery Processes and Testing
66 questions
Test 16 · Final
Physical Security and Personnel Safety, Security in the Software Development Life Cycle, Security Controls in Development Ecosystems, Software Security Effectiveness and Acquired Software, Secure Coding Guidelines and Standards
84 questions
+150 XP

Professional Ethics, Core Security Concepts and the Five Pillars, Security Governance Principles

Security Control and Risk Frameworks, Legal, Regulatory, and Privacy Requirements, Investigation Types

Security Policies, Standards, Procedures, and Guidelines, Business Continuity Requirements and BIA, Personnel Security Policies and Procedures

Risk Management Concepts, Threat Modeling Concepts and Methodologies, Supply Chain Risk Management (SCRM)

Security Awareness, Education, and Training, Information and Asset Classification, Secure Asset Provisioning and Inventory

Data Lifecycle and Data Roles, Asset Retention and Data Security Controls, Secure Design Principles

Fundamental Security Models, Security Capabilities of Information Systems, Vulnerabilities of Security Architectures and Designs

Cryptographic Solutions and Lifecycle, Cryptanalytic Attacks, Site and Facility Security Design

Information System Lifecycle Management, Network Models, Protocols, and Converged Protocols, Network Segmentation, Wireless, and SDN

Secure Network Components, Secure Communication Channels, Control of Physical and Logical Access to Assets

Identification and Authentication Strategy, Federated Identity and Single Sign-On, Authorization Mechanisms and Access Control Models

Identity and Access Provisioning Lifecycle, Assessment, Test, and Audit Strategies, Security Control Testing

Security Process Data, Analysis, and Reporting, Investigations and Digital Forensics, Logging and Monitoring Activities

Configuration and Change Management, Foundational Security Operations Concepts, Incident Management

Detective and Preventive Measures, Recovery Strategies and High Availability, Disaster Recovery Processes and Testing

Physical Security and Personnel Safety, Security in the Software Development Life Cycle, Security Controls in Development Ecosystems, Software Security Effectiveness and Acquired Software, Secure Coding Guidelines and Standards

Professional Ethics, Core Security Concepts and the Five Pillars, Security Governance Principles

Security Control and Risk Frameworks, Legal, Regulatory, and Privacy Requirements, Investigation Types

Security Policies, Standards, Procedures, and Guidelines, Business Continuity Requirements and BIA, Personnel Security Policies and Procedures

Risk Management Concepts, Threat Modeling Concepts and Methodologies, Supply Chain Risk Management (SCRM)

Security Awareness, Education, and Training, Information and Asset Classification, Secure Asset Provisioning and Inventory

Data Lifecycle and Data Roles, Asset Retention and Data Security Controls, Secure Design Principles

Fundamental Security Models, Security Capabilities of Information Systems, Vulnerabilities of Security Architectures and Designs

Cryptographic Solutions and Lifecycle, Cryptanalytic Attacks, Site and Facility Security Design

Information System Lifecycle Management, Network Models, Protocols, and Converged Protocols, Network Segmentation, Wireless, and SDN

Secure Network Components, Secure Communication Channels, Control of Physical and Logical Access to Assets

Identification and Authentication Strategy, Federated Identity and Single Sign-On, Authorization Mechanisms and Access Control Models

Identity and Access Provisioning Lifecycle, Assessment, Test, and Audit Strategies, Security Control Testing

Security Process Data, Analysis, and Reporting, Investigations and Digital Forensics, Logging and Monitoring Activities

Configuration and Change Management, Foundational Security Operations Concepts, Incident Management

Detective and Preventive Measures, Recovery Strategies and High Availability, Disaster Recovery Processes and Testing

Physical Security and Personnel Safety, Security in the Software Development Life Cycle, Security Controls in Development Ecosystems, Software Security Effectiveness and Acquired Software, Secure Coding Guidelines and Standards