(ISC)2 CISSP Certified Information Systems Security Professional Official Study Guide & Practice Tests Bundle 3rd Edition

Book Preface

Introduction
The (ISC)2® CISSP®: Certified Information Systems Security Professional Official Study Guide, Ninth Edition, offers you a solid foundation for the Certified Information Systems Security Professional (CISSP) exam. By purchasing this book, you’ve shown a willingness to learn and a desire to develop the skills you need to achieve this certification. This introduction provides you with a basic overview of this book and the CISSP exam.
This book is designed for readers and students who want to study for the CISSP certification exam. If your goal is to become a certified security professional, then the CISSP certification and this study guide are for you. The purpose of this book is to adequately prepare you to take the CISSP exam.

Before you dive into this book, you need to have accomplished a few tasks on your own. You need to have a general understanding of IT and of security. You should have the necessary five years of full-time paid work experience (or four years if you have a college degree) in two or more of the eight domains covered by the CISSP exam. If you are qualified to take the CISSP exam according to (ISC)², then you are sufficiently prepared to use this book to study for it. For more information on (ISC)², see the next section. (ISC)² also allows for a one- year reduction of the five- year experience requirement if you have earned one of the approved certifications from the (ISC)² prerequisite pathway.
These include certifications such as Certified Authorization Professional (CAP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Cisco Certified Internetwork Expert (CCIE), Cisco Certified Network Associate Security (CCNA Security), CompTIA Advanced Security Practitioner (CASP), CompTIA Security+, CompTIA Cybersecurity Analyst (CySA+), and many of the Global Information Assurance Certification (GIAC) certifications. For a complete list of qualifying certifications, visit www.isc2.org/Certifications/CISSP

Contents at a Glance
Introduction xxxvii
Assessment Test lix
Chapter 1 Security Governance Through Principles and Policies 1
Chapter 2 Personnel Security and Risk Management Concepts 43
Chapter 3 Business Continuity Planning 113
Chapter 4 Laws, Regulations, and Compliance 143
Chapter 5 Protecting Security of Assets 179
Chapter 6 Cryptography and Symmetric Key Algorithms 219
Chapter 7 PKI and Cryptographic Applications 263
Chapter 8 Principles of Security Models, Design, and Capabilities 309
Chapter 9 Security Vulnerabilities, Threats, and Countermeasures 353
Chapter 10 Physical Security Requirements 447
Chapter 11 Secure Network Architecture and Components 495
Chapter 12 Secure Communications and Network Attacks 581
Chapter 13 Managing Identity and Authentication 637
Chapter 14 Controlling and Monitoring Access 677
Chapter 15 Security Assessment and Testing 723
Chapter 16 Managing Security Operations 763
Chapter 17 Preventing and Responding to Incidents 801
Chapter 18 Disaster Recovery Planning 861
Chapter 19 Investigations and Ethics 909
Chapter 20 Software Development Security 941
Chapter 21 Malicious Code and Application Attacks 993
Appendix A Answers to Review Questions 1041
Appendix B Answers to Written Labs 1099
Index 1117