- About This E-Book
- Title Page
- Copyright Page
- Contents at a Glance
- Table of Contents
- About the Author
- About the Technical Reviewers
- Dedication
- Acknowledgments
- We Want to Hear from You!
- Reader Services
- Introduction
- Chapter 1. The CISSP Certification Exam
- Chapter 2. Logical Asset Security
- Introduction
- Basic Security Principles
- Data Management: Determine and Maintain Ownership
- Data Standards
- Data Security, Protection, Sharing, and Dissemination
- Classifying Information and Supporting Assets
- Asset Management and Governance
- Determine Data Security Controls
- Laws, Standards, Mandates and Resources
- Exam Prep Questions
- Answers to Exam Prep Questions
- Need to Know More?
- Chapter 3. Physical Asset Security
- Introduction
- Physical Security Risks
- Facility Concerns and Requirements
- Perimeter Controls
- Employee Access Control
- Environmental Controls
- Electrical Power
- Equipment Life Cycle
- Fire Prevention, Detection, and Suppression
- Alarm Systems
- Exam Prep Questions
- Answers to Exam Prep Questions
- Suggested Reading and Resources
- Chapter 4. Security and Risk Management
- Introduction
- Security Governance
- Protection of Intellectual Properly
- Privacy Laws and Protection of Personal Information
- Relevant Laws and Regulations
- United States Legal System and Laws
- International Legal Systems and Laws
- Computer Crime and Hackers
- Risk Management Concepts
- Countermeasure Selection
- Develop and Implement Security Policy
- Types of Controls
- Implement Personnel Security
- Security Education, Training, and Awareness
- Professional Ethics Training and Awareness
- Exam Prep Questions
- Answers to Exam Prep Questions
- Need to Know More?
- Chapter 5. Security Engineering
- Introduction
- Fundamental Concepts of Security Models
- Security Architecture
- Common Formal Security Models
- Product Security Evaluation Models
- System Validation
- Security Guidelines and Governance
- Vulnerabilities of Security Architectures
- Exam Prep Questions
- Answers to Exam Prep Questions
- Need to Know More?
- Chapter 6. The Application and Use of Cryptography
- Introduction
- Cryptographic Basics
- History of Encryption
- Steganography
- Algorithms
- Cipher Types and Methods
- Symmetric Encryption
- Asymmetric Encryption
- Hybrid Encryption
- Integrity and Authentication
- Public Key Infrastructure
- Email Protection Mechanisms
- Securing TCP/IP with Cryptographic Solutions
- Cryptographic Attacks
- Exam Prep Questions
- Answers to Exam Prep Questions
- Need to Know More?
- Chapter 7. Communications and Network Security
- Introduction
- Secure Network Design
- Network Models and Standards
- TCP/IP
- LANs and Their Components
- Communication Standards
- Network Equipment
- Routing
- WANs and Their Components
- Cloud Computing
- Voice Communications and Wireless Communications
- Network Access Control Devices
- Remote Access
- Message Privacy and Multimedia Collaboration
- Exam Prep Questions
- Answers to Exam Prep Questions
- Need to Know More?
- Chapter 8. Identity and Access Management
- Chapter 9. Security Assessment and Testing
- Introduction
- Security Assessments and Penetration Test Strategies
- Test Techniques and Methods
- Security Threats and Vulnerabilities
- Network Security Threats and Attack Techniques
- Access Control Threats and Attack Techniques
- Social-based Threats and Attack Techniques
- Malicious Software Threats and Attack Techniques
- How Computer Crime Has Changed
- Well-Known Computer Crimes and Criminals
- Investigating Computer Crime
- Forensics
- Investigations
- Trial
- Exam Prep Questions
- Answers to Exam Prep Questions
- Need to Know More?
- Chapter 10. Security Operations
- Introduction
- Foundational Security Operations Concepts
- Resource Protection
- Telecommunication Controls
- System Resilience, Fault Tolerance, and Recovery Controls
- Monitoring and Auditing Controls
- Intrusion Detection Systems
- Responding to Operational Security Incidents
- The Disaster Recovery Life Cycle
- Exam Prep Questions
- Answers to Exam Prep Questions
- Need to Know More?
- Chapter 11. Software Development Security
- Chapter 12. Business Continuity Planning
- Practice Exam I
- Answers to Practice Exam I
- Practice Exam II
- Answers to Practice Exam II
- Glossary
- Index
- Exam Cram The CISSP Cram Sheet
- Logical and Physical Asset Security
- Security and Risk Management
- Security Engineering
- The Application and Use of Cryptography
- Telecommunications and Communications and Network Security
- Identity and Access Management
- Security Assessment and Testing
- Security Assessment
- Software Development Security
- Business Continuity Planning
- Where are the companion content files?
- Code Snippets
Acknowledgments
I would like to thank my wife, Christine, for understanding the long hours such a project entails. Also, thanks to Michelle Newcomb and the entire Pearson crew.
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.