Skip to content
Certification Guides

ISC2 CISSP Certified Information Systems Security Professional Official Practice Tests, 4th Edition (2024)

ISC2 CISSP Certified Information Systems Security Professional Official Practice Tests, 4th Edition (2024) is your go-to practice exam, covering essential topics needed for your certification success.

Preview 16 of 776 pages

See the first 16 pages exactly as they appear in the document.

  1. Page 1
  2. Page 2
  3. Page 3
    Read page 3 as text

    Table of Contents Cover Table of Contents Title Page Copyright Acknowledgments About the Authors About the Technical Editors Introduction CISSP Certification Taking the CISSP Exam Computer-Based Testing Environment Exam Retake Policy Work Experience Requirement Recertification Requirements Using This Book to Practice Using the Online Practice Tests How to Contact the Publisher Chapter 1: Security and Risk Management (Domain 1) Chapter 2: Asset Security (Domain 2) Chapter 3: Security Architecture and Engineering (Domain 3) Chapter 4: Communication and Network Security (Domain 4) Chapter 5: Identity and Access Management (Domain 5) Chapter 6: Security Assessment and Testing (Domain 6) Chapter 7: Security Operations (Domain 7) Chapter 8: Software Development Security (Domain 8) Chapter 9: Practice Test 1 Chapter 10: Practice Test 2

  4. Page 4
    Read page 4 as text

    Chapter 11: Practice Test 3 Chapter 12: Practice Test 4 Appendix: Answers to Review Questions Chapter 1: Security and Risk Management (Domain 1) Chapter 2: Asset Security (Domain 2) Chapter 3: Security Architecture and Engineering (Domain 3) Chapter 4: Communication and Network Security (Domain 4) Chapter 5: Identity and Access Management (Domain 5) Chapter 6: Security Assessment and Testing (Domain 6) Chapter 7: Security Operations (Domain 7) Chapter 8: Software Development Security (Domain 8) Chapter 9: Practice Test 1 Chapter 10: Practice Test 2 Chapter 11: Practice Test 3 Chapter 12: Practice Test 4 Index End User License Agreement

  5. Page 5
    Read page 5 as text

    ISC2 ® CISSP ® Certified Information Systems Security Professional Official Practice Tests Fourth Edition Mike Chapple, CISSP David Seidl, CISSP

  6. Page 6
  7. Page 7
    Read page 7 as text

    Copyright © 2024 by John Wiley & Sons, Inc. All rights reserved. Published by John Wiley & Sons, Inc., Hoboken, New Jersey. Published simultaneously in Canada and the United Kingdom. ISBNs: 9781394255078 (paperback), 9781394255092 (ePDF), 9781394255085 (ePub) No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning, or otherwise, except as permitted under Section 107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of the Publisher, or authorization through payment of the appropriate per-copy fee to the Copyright Clearance Center, Inc., 222 Rosewood Drive, Danvers, MA 01923, (978) 750-8400, fax (978) 750-4470, or on the web at www.copyright.com . Requests to the Publisher for permission should be addressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030, (201) 748-6011, fax (201) 748-6008, or online at www.wiley.com/go/permission . Trademarks: Wiley, the Wiley logo, and the Sybex logo are trademarks or registered trademarks of John Wiley & Sons, Inc. and/or its affiliates in the United States and other countries and may not be used without written permission. ISC2 and CISSP are trademarks or registered trademarks of ISC2, Inc. All other trademarks are the property of their respective owners. John Wiley & Sons, Inc. is not associated with any product or vendor mentioned in this book. Limit of Liability/Disclaimer of Warranty: While the publisher and authors have used their best efforts in preparing this book, they make no representations or warranties with respect to the accuracy or completeness of the contents of this book and specifically disclaim any implied warranties of merchantability or fitness for a particular purpose. No warranty may be created or extended by sales representatives or written sales materials. The advice and strategies contained herein may not be suitable for your situation. You should consult with a professional where appropriate. Further, readers should be aware that websites listed in this work may have changed or disappeared between when this work was written and when it is read. Neither the publisher nor authors shall be liable for any loss of profit or any other commercial damages, including but not limited to special, incidental, consequential, or other damages. For general information on our other products and services, please contact our Customer Care Department within the United States at (800) 762-2974, outside the United States at (317) 572-3993. For product technical support, you can find answers to frequently asked questions or reach us via live chat at https://sybexsupport.wiley.com . Wiley also publishes its books in a variety of electronic formats. Some content that appears in print may not be available in electronic formats. For more information about Wiley products, visit our web site at www.wiley.com . Library of Congress Cataloging in Publication data available on request. Cover image: © Getty Images Inc./Jeremy Woodhouse Cover design: Wiley

  8. Page 8
    Read page 8 as text

    Acknowledgments The authors would like to thank the many people who made this book possible. Jim Minatel at Wiley Publishing helped us extend the Sybex CISSP franchise to include this title and has continued to champion the International Information System Security Certification Consortium (ISC2). Carole Jelen, our agent, tackles all the back-end magic for our writing efforts and worked on both the logistical details and the business side of the book with her usual grace and commitment to excellence. Aaron Kraus, Shahla Pirnia, and Emily Vandewater, our technical editors, pointed out many opportunities to improve our work and deliver a high-quality final product. Kelly Talbot served as our project manager and made sure everything fit together. Many other people we'll never meet worked behind the scenes to make this book a success, and we really appreciate their time and talents to make this next edition come together.

  9. Page 9
    Read page 9 as text

    About the Authors Mike Chapple, PhD, CISSP, is an author of the best-selling ISC2CISSP Certified Information Systems Security Professional Official Study Guide (Sybex, 2024), now in its 10th edition. He is an information security professional with more than 25 years of experience in higher education, the private sector, and government. Mike is currently a teaching professor of IT, analytics, and operations at the University of Notre Dame's Mendoza College of Business. He previously was a senior director for IT service delivery at Notre Dame, where he oversaw the information security, data governance, IT architecture, project management, strategic planning, and product management functions for the university. Before returning to Notre Dame, Mike served as the executive vice president and chief information officer of the Brand Institute, a Miami-based marketing consultancy. Mike also spent four years in the information security research group at the National Security Agency and served as an active-duty intelligence officer in the U.S. Air Force.

  10. Page 10
    Read page 10 as text

    Mike earned both his BS and PhD degrees from Notre Dame in computer science and engineering. He also holds an MS in computer science from the University of Idaho and an MBA from Auburn University. His IT certifications include the CISSP, Security+, CySA+, CISA, PenTest+, CIPP/US, CISM, CCSP, and PMP credentials. Mike is the author of more than 100 technology books and video courses focused on security and privacy certifications. He provides books, video-based training, and free study groups for a wide variety of IT certifications at his website, CertMike.com . David Seidl, CISSP, is the vice president for information technology and CIO at Miami University where he leads a nationally recognized and award-winning IT organization. During his IT career, he has served in a variety of technical and information security roles including as the senior director for Campus Technology Services at the University of Notre Dame where he co-led Notre Dame's move to the cloud and oversaw cloud operations, ERP, databases, identity management, and a broad range of other technologies and services. He also served as Notre Dame's director of information security. He has taught information security and networking undergraduate courses as an instructor for Notre Dame's Mendoza College of Business and has

  11. Page 11
    Read page 11 as text

    written more than 20 books on security certification and cyberwarfare, including coauthoring the previous editions of CISSP ISC2 Official Practice Tests (Sybex, 2021) as well as CompTIA CySA+ Study Guide: Exam CS0-003 , CompTIA CySA+ Practice Tests: Exam CS0-003 , CompTIA Security+ Study Guide: Exam SY0-701 , and CompTIA Security+ Practice Tests: Exam SY0-701 as well as other certification guides and books on information security. David holds a bachelor's degree in communication technology and a master's degree in information security from Eastern Michigan University, as well as CISSP, CySA+, PenTest+, GPEN, and GCIH certifications.

  12. Page 12
    Read page 12 as text

    About the Technical Editors Aaron Kraus , CISSP, CCSP, began his career as a security auditor and has gone on to work in security and compliance roles across financial services, insurance, consulting, and tech startups. He is currently a senior consultant at Latacora and runs his own consulting business, with experience ranging from initial implementation to aligning large, multinational organization's security programs to meet evolving compliance needs, respond to emerging threats, and accommodate new and changing business practices. He has been a course author, instructor, and dean of cybersecurity curriculum at Learning Tree International for more than 15 years and has worked on several publications at Wiley. He is the author of The Official ISC2 CCSP CBK Reference, 4th Edition , and coauthor of The Official ISC2 CISSP CBK Reference, 6th Edition , as well as the technical editor for the official CISSP and CCSP study guides and practice test books. Shahla Pirnia is a freelance technical editor and proofreader with a focus on cybersecurity and certification topics. She currently serves as a technical editor for CertMike.com . Shahla earned BS degrees in computer and information science and Psychology from UMGC and an AA in information systems from Montgomery College, MD. Shahla's IT certifications include CompTIA Security+, Network+, A+, and ISC2 CC. Emily Vandewater is a senior principal security consultant at Elteni Cybersecurity Consulting and Advisory, where she focuses on building information security programs and providing strategic guidance to mitigate cyber risks and ensure regulatory compliance. With more than 15 years of progressive experience in the tech and cybersecurity sectors, Emily has distinguished herself through key leadership positions, notably as a former director of information security at an IT managed service provider. Beyond her consulting work, Emily applies her expertise as a freelance technical editor and content developer for leading publishers, including Wiley. Her deep understanding of cybersecurity is backed by an array of IT certifications, including ISC2

  13. Page 13
    Read page 13 as text

    CISSP and SSCP, CompTIA CASP+, CySA+, Security+ and Cloud+, Azure, and Microsoft Administrator Expert.

  14. Page 14
    Read page 14 as text

    Introduction ISC2 CISSP® Certified Information Systems Security Professional Official Practice Tests Fourth Edition is a companion volume to ISC2 CISSP Certified Information Systems Security Professional Official Study Guide, Tenth edition (Sybex, 2024) . It includes questions that cover content from the CISSP Detailed Content Outline and exam that became effective on April 15, 2024. If you're looking to test your knowledge before you take the CISSP exam, this book will help you by providing more than 1,300 questions that cover the CISSP Common Body of Knowledge (CBK) and easy-to-understand explanations of both right and wrong answers. If you're just starting to prepare for the CISSP exam, we highly recommend that you use the ISC2 CISSP Certified Information Systems Security Professional Official Study Guide to help you learn about each of the domains covered by the CISSP exam. Once you're ready to test your knowledge, use this book to help find places where you may need to study more or to practice for the exam itself. Since this is a companion to the CISSP Study Guide , this book is designed to be similar to taking the CISSP exam. It contains multipart scenarios as well as standard multiple-choice and matching questions like you may encounter on the certification exam. The book is broken up into 12 chapters: 8 domain-centric chapters with 100 or more questions about each domain, and 4 chapters that contain 125- question practice tests to simulate taking the exam. CISSP Certification The CISSP certification is offered by the International Information System Security Certification Consortium (ISC2), a global nonprofit organization. ISC2's mission statement says that “ISC2 strengthens the influence, diversity and vitality of the field through advocacy, expertise and workforce empowerment that accelerates cyber safety and security in an interconnected world.” ISC2 achieves this mission

  15. Page 15
    Read page 15 as text

    by delivering the world's leading information security certification program, the CISSP. ISC2 also offers additional certifications including the following: Certified in Cybersecurity (CC) Systems Security Certified Practitioner (SSCP) Certified Cloud Security Professional (CCSP) Governance, Risk and Compliance Certification (CGRC) Certified Secure Software Lifecycle Professional (CSSLP) Information Systems Security Architecture Professional (ISSAP) Information Systems Security Engineering Professional (ISSEP) Information Systems Security Management Professional (ISSMP) The CISSP certification covers eight domains of information security knowledge. These domains are meant to serve as the broad knowledge foundation required to succeed in the information security profession. Security and Risk Management Asset Security Security Architecture and Engineering Communication and Network Security Identity and Access Management (IAM) Security Assessment and Testing Security Operations Software Development Security The CISSP domains are periodically updated by ISC2. The most recent revision on April 15, 2024, slightly modified the weighting for Security and Risk Management from 15% to 16%, while decreasing the focus on Software Development Security from 11% to 10%. It also added or expanded coverage of topics such as intellectual property, privacy laws and regulations, software bills of materials, end-of-life support, SASE, operational technology, high-performance computing, intermediate

  16. Page 16
    Read page 16 as text

    distribution frame, Compute Express Link, and a variety of other topics. Complete details on the CISSP CBK are contained in the 2024 CISSP Detailed Content Outline. It includes a full outline of exam topics, which can be found on the ISC2 website at www.isc2.org . Taking the CISSP Exam The English version of the CISSP exam uses a technology called computerized adaptive testing (CAT). With this format, you will face an exam containing between 100 to 150 questions with a three-hour time limit. You will not have the opportunity to skip back and forth because the computer selects the next questions that it asks you based upon your answers to previous questions. If you're doing well on the exam, it will get more difficult as you progress. Don't let that unnerve you! You can find more information about computerized adaptive testing directly from ISC2 at www.isc2.org/certifications/cissp/cissp-cat . The computerized adaptive testing version of the exam is offered in English, Chinese, German, Japanese, and Spanish. Unlike earlier versions of the exam, the CISSP exam will no longer be offered in linear exam format after April 15th, 2024. While it's impossible to directly simulate a CAT exam in book form, as you work through these practice exams you might want to use 80% as a goal to help you get a sense of whether you're ready to sit for the actual exam. When you're ready, you can schedule an exam at a location near you through the ISC2 website. Questions on the CISSP exam are provided in both multiple-choice form and what ISC2 calls advanced innovative questions, which are drag-and-drop and hotspot questions, both of which are offered in a computer-based testing environment. Innovative questions are scored the same as traditional multiple-choice questions and have only one right answer.

760 more pages in the full document

Unlock it once and it stays in your library, ready to chat with or turn into flashcards.

Unlock the full document

More Certified Information Systems Security Professional study materials

See all

Study this document with CramX

Once it is in your library, every tool can work from it.