ISC2 CISSP Certified Information Systems Security Professional Official Practice Tests, 4th Edition (2024)

Preview (16 of 776 Pages)

100%

ISC2 CISSP Certified Information Systems Security Professional Official Practice Tests, 4th Edition (2024) - Page 1 preview image

Loading page ...

ISC2 CISSP Certified Information Systems Security Professional Official Practice Tests, 4th Edition (2024) - Page 2 preview image

Loading page ...

ISC2 CISSP Certified Information Systems Security Professional Official Practice Tests, 4th Edition (2024) - Page 3 preview image

Loading page ...

Table of ContentsCoverTable of ContentsTitle PageCopyrightAcknowledgmentsAbout the AuthorsAbout the Technical EditorsIntroductionCISSP CertificationTaking the CISSP ExamComputer-Based Testing EnvironmentExam Retake PolicyWork Experience RequirementRecertification RequirementsUsing This Book to PracticeUsing the Online Practice TestsHow to Contact the PublisherChapter 1: Security and Risk Management (Domain 1)Chapter 2: Asset Security (Domain 2)Chapter 3: Security Architecture and Engineering (Domain 3)Chapter 4: Communication and Network Security (Domain 4)Chapter 5: Identity and Access Management (Domain 5)Chapter 6: Security Assessment and Testing (Domain 6)Chapter 7: Security Operations (Domain 7)Chapter 8: Software Development Security (Domain 8)Chapter 9: Practice Test 1Chapter 10: Practice Test 2

ISC2 CISSP Certified Information Systems Security Professional Official Practice Tests, 4th Edition (2024) - Page 4 preview image

Loading page ...

Chapter 11: Practice Test 3Chapter 12: Practice Test 4Appendix: Answers to Review QuestionsChapter 1: Security and Risk Management (Domain 1)Chapter 2: Asset Security (Domain 2)Chapter 3: Security Architecture and Engineering (Domain 3)Chapter 4: Communication and Network Security (Domain 4)Chapter 5: Identity and Access Management (Domain 5)Chapter 6: Security Assessment and Testing (Domain 6)Chapter 7: Security Operations (Domain 7)Chapter 8: Software Development Security (Domain 8)Chapter 9: Practice Test 1Chapter 10: Practice Test 2Chapter 11: Practice Test 3Chapter 12: Practice Test 4IndexEnd User License Agreement

ISC2 CISSP Certified Information Systems Security Professional Official Practice Tests, 4th Edition (2024) - Page 5 preview image

Loading page ...

ISC2®CISSP®CertifiedInformation Systems SecurityProfessionalOfficial Practice TestsFourth EditionMike Chapple, CISSPDavid Seidl, CISSP

ISC2 CISSP Certified Information Systems Security Professional Official Practice Tests, 4th Edition (2024) - Page 6 preview image

Loading page ...

ISC2 CISSP Certified Information Systems Security Professional Official Practice Tests, 4th Edition (2024) - Page 7 preview image

Loading page ...

Copyright © 2024 by John Wiley & Sons, Inc. All rights reserved.Published by John Wiley & Sons, Inc., Hoboken, New Jersey.Published simultaneously in Canada and the United Kingdom.ISBNs: 9781394255078 (paperback), 9781394255092 (ePDF), 9781394255085 (ePub)No part of this publication may be reproduced, stored in a retrieval system, or transmitted inany form or by any means, electronic, mechanical, photocopying, recording, scanning, orotherwise, except as permitted under Section 107 or 108 of the 1976 United States CopyrightAct, without either the prior written permission of the Publisher, or authorization throughpayment of the appropriate per-copy fee to the Copyright Clearance Center, Inc., 222Rosewood Drive, Danvers, MA 01923, (978) 750-8400, fax (978) 750-4470, or on the web atwww.copyright.com. Requests to the Publisher for permission should be addressed to thePermissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030,(201) 748-6011, fax (201) 748-6008, or online atwww.wiley.com/go/permission.Trademarks:Wiley, the Wiley logo, and the Sybex logo are trademarks or registeredtrademarks of John Wiley & Sons, Inc. and/or its affiliates in the United States and othercountries and may not be used without written permission. ISC2 and CISSP are trademarks orregistered trademarks of ISC2, Inc. All other trademarks are the property of their respectiveowners. John Wiley & Sons, Inc. is not associated with any product or vendor mentioned inthis book.Limit of Liability/Disclaimer of Warranty:While the publisher and authors have usedtheir best efforts in preparing this book, they make no representations or warranties withrespect to the accuracy or completeness of the contents of this book and specifically disclaimany implied warranties of merchantability or fitness for a particular purpose. No warrantymay be created or extended by sales representatives or written sales materials. The advice andstrategies contained herein may not be suitable for your situation. You should consult with aprofessional where appropriate. Further, readers should be aware that websites listed in thiswork may have changed or disappeared between when this work was written and when it isread. Neither the publisher nor authors shall be liable for any loss of profit or any othercommercial damages, including but not limited to special, incidental, consequential, or otherdamages.For general information on our other products and services, please contact our Customer CareDepartment within the United States at (800) 762-2974, outside the United States at (317)572-3993. For product technical support, you can find answers to frequently asked questionsor reach us via live chat athttps://sybexsupport.wiley.com.Wiley also publishes its books in a variety of electronic formats. Some content that appears inprint may not be available in electronic formats. For more information about Wiley products,visit our web site atwww.wiley.com.Library of Congress Cataloging in Publication data available on request.Cover image: © Getty Images Inc./Jeremy WoodhouseCover design: Wiley

ISC2 CISSP Certified Information Systems Security Professional Official Practice Tests, 4th Edition (2024) - Page 8 preview image

Loading page ...

AcknowledgmentsThe authors would like to thank the many people who made this bookpossible. Jim Minatel at Wiley Publishing helped us extend the SybexCISSP franchise to include this title and has continued to championthe International Information System Security CertificationConsortium (ISC2). Carole Jelen, our agent, tackles all the back-endmagic for our writing efforts and worked on both the logistical detailsand the business side of the book with her usual grace andcommitment to excellence. Aaron Kraus, Shahla Pirnia, and EmilyVandewater, our technical editors, pointed out many opportunities toimprove our work and deliver a high-quality final product. KellyTalbot served as our project manager and made sure everything fittogether. Many other people we'll never meet worked behind thescenes to make this book a success, and we really appreciate their timeand talents to make this next edition come together.

ISC2 CISSP Certified Information Systems Security Professional Official Practice Tests, 4th Edition (2024) - Page 9 preview image

Loading page ...

About the AuthorsMike Chapple, PhD, CISSP,is an author of the best-sellingISC2CISSPCertified Information Systems Security ProfessionalOfficial Study Guide(Sybex, 2024), now in its 10th edition. He is aninformation security professional with more than 25 years ofexperience in higher education, the private sector, and government.Mike is currently a teaching professor of IT, analytics, and operationsat the University of Notre Dame's Mendoza College of Business. Hepreviously was a senior director for IT service delivery at Notre Dame,where he oversaw the information security, data governance, ITarchitecture, project management, strategic planning, and productmanagement functions for the university.Before returning to Notre Dame, Mike served as the executive vicepresident and chief information officer of the Brand Institute, aMiami-based marketing consultancy. Mike also spent four years in theinformation security research group at the National Security Agencyand served as an active-duty intelligence officer in the U.S. Air Force.

ISC2 CISSP Certified Information Systems Security Professional Official Practice Tests, 4th Edition (2024) - Page 10 preview image

Loading page ...

Mike earned both his BS and PhD degrees from Notre Dame incomputer science and engineering. He also holds an MS in computerscience from the University of Idaho and an MBA from AuburnUniversity. His IT certifications include the CISSP, Security+, CySA+,CISA, PenTest+, CIPP/US, CISM, CCSP, and PMP credentials.Mike is the author of more than 100 technology books and videocourses focused on security and privacy certifications. He providesbooks, video-based training, and free study groups for a wide varietyof IT certifications at his website,CertMike.com.David Seidl, CISSP,is the vice president for information technologyand CIO at Miami University where he leads a nationally recognizedand award-winning IT organization. During his IT career, he hasserved in a variety of technical and information security rolesincluding as the senior director for Campus Technology Services at theUniversity of Notre Dame where he co-led Notre Dame's move to thecloud and oversaw cloud operations, ERP, databases, identitymanagement, and a broad range of other technologies and services. Healso served as Notre Dame's director of information security. He hastaught information security and networking undergraduate courses asan instructor for Notre Dame's Mendoza College of Business and has

ISC2 CISSP Certified Information Systems Security Professional Official Practice Tests, 4th Edition (2024) - Page 11 preview image

Loading page ...

written more than 20 books on security certification and cyberwarfare,including coauthoring the previous editions ofCISSP ISC2OfficialPractice Tests (Sybex, 2021) as well asCompTIA CySA+ Study Guide:Exam CS0-003,CompTIA CySA+ Practice Tests: Exam CS0-003,CompTIA Security+ Study Guide: Exam SY0-701, andCompTIASecurity+ Practice Tests: Exam SY0-701as well as other certificationguides and books on information security.David holds a bachelor's degree in communication technology and amaster's degree in information security from Eastern MichiganUniversity, as well as CISSP, CySA+, PenTest+, GPEN, and GCIHcertifications.

ISC2 CISSP Certified Information Systems Security Professional Official Practice Tests, 4th Edition (2024) - Page 12 preview image

Loading page ...

About the Technical EditorsAaron Kraus,CISSP, CCSP,began his career as a security auditorand has gone on to work in security and compliance roles acrossfinancial services, insurance, consulting, and tech startups. He iscurrently a senior consultant at Latacora and runs his own consultingbusiness, with experience ranging from initial implementation toaligning large, multinational organization's security programs to meetevolving compliance needs, respond to emerging threats, andaccommodate new and changing business practices. He has been acourse author, instructor, and dean of cybersecurity curriculum atLearning Tree International for more than 15 years and has worked onseveral publications at Wiley. He is the author ofThe Official ISC2CCSP CBK Reference, 4th Edition, and coauthor ofThe Official ISC2CISSP CBK Reference, 6th Edition, as well as the technical editor forthe official CISSP and CCSP study guides and practice test books.Shahla Pirniais a freelance technical editor and proofreader with afocus on cybersecurity and certification topics. She currently serves asa technical editor forCertMike.com. Shahla earned BS degrees incomputer and information science and Psychology from UMGC and anAA in information systems from Montgomery College, MD. Shahla's ITcertifications include CompTIA Security+, Network+, A+, and ISC2CC.Emily Vandewateris a senior principal security consultant at ElteniCybersecurity Consulting and Advisory, where she focuses on buildinginformation security programs and providing strategic guidance tomitigate cyber risks and ensure regulatory compliance. With morethan 15 years of progressive experience in the tech and cybersecuritysectors, Emily has distinguished herself through key leadershippositions, notably as a former director of information security at an ITmanaged service provider. Beyond her consulting work, Emily appliesher expertise as a freelance technical editor and content developer forleading publishers, including Wiley. Her deep understanding ofcybersecurity is backed by an array of IT certifications, including ISC2

ISC2 CISSP Certified Information Systems Security Professional Official Practice Tests, 4th Edition (2024) - Page 13 preview image

Loading page ...

CISSP and SSCP, CompTIA CASP+, CySA+, Security+ and Cloud+,Azure, and Microsoft Administrator Expert.

ISC2 CISSP Certified Information Systems Security Professional Official Practice Tests, 4th Edition (2024) - Page 14 preview image

Loading page ...

IntroductionISC2CISSP® Certified Information Systems Security ProfessionalOfficial Practice Tests Fourth Editionis a companion volume toISC2CISSP Certified Information Systems Security Professional OfficialStudy Guide, Tenth edition (Sybex, 2024). It includes questions thatcover content from the CISSP Detailed Content Outline and exam thatbecame effective on April 15, 2024. If you're looking to test yourknowledge before you take the CISSP exam, this book will help you byproviding more than 1,300 questions that cover the CISSP CommonBody of Knowledge (CBK) and easy-to-understand explanations ofboth right and wrong answers.If you're just starting to prepare for the CISSP exam, we highlyrecommend that you use theISC2 CISSP Certified InformationSystems Security Professional Official Study Guideto help you learnabout each of the domains covered by the CISSP exam. Once you'reready to test your knowledge, use this book to help find places whereyou may need to study more or to practice for the exam itself.Since this is a companion to theCISSP Study Guide, this book isdesigned to be similar to taking the CISSP exam. It contains multipartscenarios as well as standard multiple-choice and matching questionslike you may encounter on the certification exam. The book is brokenup into 12 chapters: 8 domain-centric chapters with 100 or morequestions about each domain, and 4 chapters that contain 125-question practice tests to simulate taking the exam.CISSP CertificationThe CISSP certification is offered by the International InformationSystem Security Certification Consortium (ISC2), a global nonprofitorganization. ISC2's mission statement says that “ISC2 strengthensthe influence, diversity and vitality of the field through advocacy,expertise and workforce empowerment that accelerates cyber safetyand security in an interconnected world.” ISC2 achieves this mission

ISC2 CISSP Certified Information Systems Security Professional Official Practice Tests, 4th Edition (2024) - Page 15 preview image

Loading page ...

by delivering the world's leading information security certificationprogram, the CISSP. ISC2 also offers additional certificationsincluding the following:Certified in Cybersecurity (CC)Systems Security Certified Practitioner (SSCP)Certified Cloud Security Professional (CCSP)Governance, Risk and Compliance Certification (CGRC)Certified Secure Software Lifecycle Professional (CSSLP)Information Systems Security Architecture Professional (ISSAP)Information Systems Security Engineering Professional (ISSEP)Information Systems Security Management Professional (ISSMP)The CISSP certification covers eight domains of information securityknowledge. These domains are meant to serve as the broad knowledgefoundation required to succeed in the information security profession.Security and Risk ManagementAsset SecuritySecurity Architecture and EngineeringCommunication and Network SecurityIdentity and Access Management (IAM)Security Assessment and TestingSecurity OperationsSoftware Development SecurityThe CISSP domains are periodically updated by ISC2. The most recentrevision on April 15, 2024, slightly modified the weighting for Securityand Risk Management from 15% to 16%, while decreasing the focus onSoftware Development Security from 11% to 10%. It also added orexpanded coverage of topics such as intellectual property, privacy lawsand regulations, software bills of materials, end-of-life support, SASE,operational technology, high-performance computing, intermediate

ISC2 CISSP Certified Information Systems Security Professional Official Practice Tests, 4th Edition (2024) - Page 16 preview image

Loading page ...

distribution frame, Compute Express Link, and a variety of othertopics.Complete details on the CISSP CBK are contained in the 2024 CISSPDetailed Content Outline. It includes a full outline of exam topics,which can be found on the ISC2 website atwww.isc2.org.Taking the CISSP ExamThe English version of the CISSP exam uses a technology calledcomputerized adaptive testing(CAT). With this format, you will facean exam containing between 100 to 150 questions with a three-hourtime limit. You will not have the opportunity to skip back and forthbecause the computer selects the next questions that it asks you basedupon your answers to previous questions. If you're doing well on theexam, it will get more difficult as you progress. Don't let that unnerveyou!You can find more information about computerized adaptive testingdirectly from ISC2 atwww.isc2.org/certifications/cissp/cissp-cat.The computerized adaptive testing version of the exam is offered inEnglish, Chinese, German, Japanese, and Spanish. Unlike earlierversions of the exam, the CISSP exam will no longer be offered inlinear exam format after April 15th, 2024.While it's impossible to directly simulate a CAT exam in book form, asyou work through these practice exams you might want to use 80% asa goal to help you get a sense of whether you're ready to sit for theactual exam. When you're ready, you can schedule an exam at alocation near you through the ISC2 website.Questions on the CISSP exam are provided in both multiple-choiceform and what ISC2 callsadvanced innovativequestions, which aredrag-and-drop and hotspot questions, both of which are offered in acomputer-based testing environment. Innovative questions are scoredthe same as traditional multiple-choice questions and have only oneright answer.

Preview Mode

This document has 776 pages. Sign in to access the full document!

Report

Study Now!

Document Details

Related Documents

ISC2 CISSP Certified Information Systems Security Professional Official Study Guide and Practice Tests (2024)

ISC2� CISSP� Certified Information Systems Security Professional Official Study Guide, 10th Edition (2024)

CISSP Official Study Guide (2021)

Official ISC2 Guide to the CISSP CBK (2019)

The Official ISC2 CISSP CBK Reference (2021)

ISC2 Cissp Certified Information Systems Security Professional Official Practice Tests (2021)

CISSP Official Practice Tests (2021)

CISSP All-in-One Exam Guide (2021)

All in One CISSP Exam Guide (2022)

CISSP Cert Guide (2022)

Company

Explore

Study Tools