CISSP PREPARATION GUIDE

By WILLIAM ROBINSON

CHAPTER SECURITY MANAGEMENT PRACTICES SAMPLE QUESTIONS BONUS QUESTIONS ADVANCED SAMPLE QUESTIONS ACCESS CONTROL SYSTEMS RATIONALE CONTROLS IDENTIFICATION AND AUTHENTICATION SOME ACCESS CONTROL ISSUES CONTENTS SAMPLE QUESTIONS TELECOMMUNICATIONS AND NETWORK SECURITY OUR GOALS DOMAIN DEFINITION MANAGEMENT CONCEPTS CRYPTOGRAPHY INTRODUCTION CRYPTOGRAPHIC TECHNOLOGIES SECRET KEY CRYPTOGRAPHY (SYMMETRIC KEY) PUBLIC (ASYMMETRIC) KEY CRYPTOSYSTEMS APPROACHES TO ESCROWED ENCRYPTION INTERNET SECURITY APPLICATIONS SECURITY ARCHITECTURE AND MODELS SECURITY ARCHITECTURE ASSURANCE INFORMATION SECURITY MODELS OPERATIONS SECURITY CONTROLS AND PROTECTIONS MONITORING AND AUDITING THREATS AND VULNERABILITIES APPLICATIONS AND SYSTEMS DEVELOPMENT THE SOFTWARE LIFE CYCLE DEVELOPMENT PROCESS THE SOFTWARE CAPABILITY MATURITY MODEL (CMM) OBJECT-ORIENTED SYSTEMS ARTIFICIAL INTELLIGENCE SYSTEMS DATABASE SYSTEMS APPLICATION CONTROLS BUSINESS CONTINUITY PLANNING AND DISASTER RECOVERY PLANNING BUSINESS CONTINUITY PLANNING DISASTER RECOVERY PLANNING LAW, INVESTIGATION, AND ETHICS TYPES OF COMPUTER CRIME LAW INVESTIGATION LIABILITY ETHICS CHAPTER 10 PHYSICAL SECURITY THREATS TO PHYSICAL SECURITY CONTROLS FOR PHYSICAL SECURITY