Certified Information Systems Security Professional

1.4 - Understand legal, regulatory, and compliance issues that pertain to information security in a holistic context

32 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–38

1.5 - Understand requirements for investigation types (i.e., administrative, criminal, civil, regulatory, industry standards)

38 questions · 8 pages

1.6 - Develop, document, and implement security policy, standards, procedures, and guidelines

31 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–31

1.7 - Identify, analyze, assess, prioritize, and implement Business Continuity (BC) requirements

31 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–31

1.8 - Contribute to and enforce personnel security policies and procedures

28 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35

1.9 - Understand and apply risk management concepts

35 questions · 7 pages

1.10 - Understand and apply threat modeling concepts and methodologies

23 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–23

1.11 - Apply Supply Chain Risk Management (SCRM) concepts

29 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–21

1.12 - Establish and maintain a security awareness, education, and training program

21 questions · 5 pages

2.1 - Identify and classify information and assets

34 questions · 7 pages

2.2 - Establish information and asset handling requirements

24 questions · 5 pages

2.3 - Provision information and assets securely

24 questions · 5 pages

2.4 - Manage data lifecycle

28 questions · 6 pages

Questions 1–5 6–10 11–15 16–18

2.5 - Ensure appropriate asset retention (e.g., End of Life (EOL), End of Support)

18 questions · 4 pages

2.6 - Determine data security controls and compliance requirements

18 questions · 4 pages

Questions 1–5 6–10 11–15 16–18

3.1 - Research, implement and manage engineering processes using secure design principles

24 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30

3.2 - Understand the fundamental concepts of security models (e.g., Biba, Star Model, Bell-LaPadula)

10 questions · 2 pages

Questions 1–5 6–10

3.3 - Select controls based upon systems security requirements

30 questions · 6 pages

3.4 - Understand security capabilities of Information Systems (IS) (e.g., memory protection, Trusted Platform Module (TPM), encryption/decryption)

45 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45

3.5 - Assess and mitigate the vulnerabilities of security architectures, designs, and solution elements

29 questions · 6 pages

3.6 - Select and determine cryptographic solutions

28 questions · 6 pages

3.7 - Understand methods of cryptanalytic attacks

42 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–42

3.8 - Apply security principles to site and facility design

29 questions · 6 pages

3.9 - Design site and facility security controls

34 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–36

3.10 - Manage the information system lifecycle

36 questions · 8 pages

4.1 - Apply secure design principles in network architectures

52 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–52

4.2 - Secure network components

17 questions · 4 pages

Questions 1–5 6–10 11–15 16–17

4.3 - Implement secure communication channels according to design

32 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–26

5.1 - Control physical and logical access to assets

26 questions · 6 pages

5.2 - Design identification and authentication strategy (e.g., people, devices, and services)

37 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–37

5.3 - Federated identity with a third-party service

25 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–25

5.4 - Implement and manage authorization mechanisms

28 questions · 6 pages

Questions 1–5 6–10 11–15 16–18

5.5 - Manage the identity and access provisioning lifecycle

18 questions · 4 pages

5.6 - Implement authentication systems

25 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–25

6.1 - Design and validate assessment, test, and audit strategies

24 questions · 5 pages

6.2 - Conduct security control testing

34 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–36

6.3 - Collect security process data (e.g., technical and administrative)

36 questions · 8 pages

6.4 - Analyze test output and generate report

19 questions · 4 pages

Questions 1–5 6–10 11–15 16–19

6.5 - Conduct or facilitate security audits

19 questions · 4 pages

Questions 1–5 6–10 11–15 16–19

7.1 - Understand and comply with investigations

29 questions · 6 pages

7.2 - Conduct logging and monitoring activities

41 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–41

7.3 - Perform Configuration Management (CM) (e.g., provisioning, baselining, automation)

29 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–23

7.4 - Apply foundational security operations concepts

23 questions · 5 pages

7.5 - Apply resource protection

22 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–22

7.6 - Conduct incident management

32 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30

7.7 - Operate and maintain detection and preventative measures

30 questions · 6 pages

7.8 - Implement and support patch and vulnerability management

30 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30

7.9 - Understand and participate in change management processes

38 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–38

7.10 - Implement recovery strategies

31 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–31

7.11 - Implement Disaster Recovery (DR) processes

29 questions · 6 pages

7.12 - Test Disaster Recovery Plans (DRP)

15 questions · 3 pages

Questions 1–5 6–10 11–15

7.13 - Participate in Business Continuity (BC) planning and exercises

34 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–21

7.14 - Implement and manage physical security

21 questions · 5 pages

7.15 - Address personnel safety and security concerns

29 questions · 6 pages

8.1 - Understand and integrate security in the Software Development Life Cycle (SDLC)

28 questions · 6 pages

8.2 - Identify and apply security controls in software development ecosystems

41 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–41

8.3 - Assess the effectiveness of software security

32 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–23

8.4 - Assess security impact of acquired software

23 questions · 5 pages

8.5 - Define and apply secure coding guidelines and standards

28 questions · 6 pages