ISC 2 CISSP Certified Information Systems Security Professional Official Practice Tests

Full-length practice tests covering all CISSP domains for the ultimate exam prep

The (ISC)² CISSP Official Practice Tests is a major resource for CISSP candidates, providing 1300 unique practice questions. The first part of the book provides 100 questions per domain. You also have access to four unique 125-question practice exams to help you master the material. As the only official practice tests endorsed by (ISC)², this book gives you the advantage of full and complete preparation. These practice tests align with the 2018 version of the exam to ensure up-to-date preparation, and are designed to cover what you'll see on exam day. Coverage includes: Security and Risk Management, Asset Security, Security Architecture and Engineering, Communication and Network Security, Identity and Access Management (IAM), Security Assessment and Testing, Security Operations, and Software Development Security.

The CISSP credential signifies a body of knowledge and a set of guaranteed skills that put you in demand in the marketplace. This book is your ticket to achieving this prestigious certification, by helping you test what you know against what you need to know.

• Test your knowledge of the 2018 exam domains
• Identify areas in need of further study
• Gauge your progress throughout your exam preparation

The CISSP exam is refreshed every few years to ensure that candidates are up-to-date on the latest security topics and trends. Currently-aligned preparation resources are critical, and periodic practice tests are one of the best ways to truly measure your level of understanding.

ABOUT THE AUTHORS

Mike Chapple, PhD, CISSP, Security+, CISA, CySA+ is Associate Teaching Professor of IT, Analytics and Operations at the University of Notre Dame. He is a leading expert on cybersecurity certification and runs CertMike.com. Mike is the author of more than 25 books including (I^SC)2 CISSP Certified Information Systems Security Professional Official Study Guide,7th and 8th Editions.

David Seidl, CISSP, GPEN, GCIH, CySA+ is the Senior Director for Campus Technology Services at the University of Notre Dame. During his IT career, he has served in a variety of technical and information security roles including leading Notre Dame's information security team as Notre Dame's Director of Information Security. David has taught college courses on information security, and writes books on information security and cyberwarfare.

Introduction xvii

Chapter 1 Security and Risk Management (Domain 1) 1

Chapter 2 Asset Security (Domain 2) 27

Chapter 3 Security Architecture and Engineering (Domain 3) 51

Chapter 4 Communication and Network Security (Domain 4) 79

Chapter 5 Identity and Access Management (Domain 5) 103

Chapter 6 Security Assessment and Testing (Domain 6) 127

Chapter 7 Security Operations (Domain 7) 151

Chapter 8 Software Development Security (Domain 8) 175

Chapter 9 Practice Test 1 201

Chapter 10 Practice Test 2 231

Chapter 11 Practice Test 3 259

Chapter 12 Practice Test 4 287

Appendix Answers 317

Chapter 1: Security and Risk Management (Domain 1) 318

Chapter 2: Asset Security (Domain 2) 327

Chapter 3: Security Architecture and Engineering (Domain 3) 338

Chapter 4: Communication and Network Security (Domain 4) 347

Chapter 5: Identity and Access Management (Domain 5) 358

Chapter 6: Security Assessment and Testing (Domain 6) 369

Chapter 7: Security Operations (Domain 7) 381

Chapter 8: Software Development Security (Domain 8) 393

Chapter 9: Practice Test 1 404

Chapter 10: Practice Test 2 418

Chapter 11: Practice Test 3 431

Chapter 12: Practice Test 4 445

Index 459