Peter H. Gregory - CISSP For Dummies

282 284

283 285

284 286

285 287

286 288

287 289

288 290

289 291

290 292

291 293

292 294

293 295

294 296

295 297

296 298

297 299

298 300

299 301

300 302

301 303

302 304

303 305

304 306

305 307

306 308

307 309

308 310

309 311

310 312

311 313

312 314

313 315

314 316

315 317

316 318

317 319

318 320

319 321

320 322

321 323

322 324

323 325

324 326

325 327

326 328

327 329

328 330

329 331

330 332

331 333

332 334

333 335

334 336

335 337

336 338

337 339

338 340

339 341

340 342

341 343

342 344

343 345

344 346

345 347

346 348

347 349

348 350

349 351

350 352

351 353

352 354

353 355

354 356

355 357

356 358

357 359

358 360

359 361

360 362

361 363

362 364

363 365

364 366

365 367

366 368

367 369

368 370

369 371

370 372

371 373

372 374

373 375

374 376

375 377

376 379

377 380

378 381

379 382

380 383

381 384

382 385

383 386

384 387

385 388

386 389

387 390

388 391

389 392

390 393

391 394

392 395

393 396

394 397

395 398

396 399

397 400

398 401

399 402

400 403

401 404

402 405

403 406

404 407

405 408

406 409

407 410

408 411

409 412

410 413

411 414

412 415

413 416

414 417

415 418

416 419

417 420

418 421

419 422

420 423

421 424

422 425

423 426

424 427

425 428

426 429

427 430

428 431

429 432

430 433

431 434

432 435

433 436

434 437

435 438

436 439

437 440

438 441

439 442

440 443

441 444

442 445

443 446

444 447

445 448

446 449

447 450

448 451

449 452

450 453

451 454

452 455

453 456

454 457

455 458

456 459

457 460

458 461

459 462

460 463

461 464

462 465

463 466

464 467

465 468

466 469

467 470

468 471

469 472

470 473

471 474

472 475

473 476

474 477

475 478

476 479

477 480

478 481

479 482

480 483

481 484

482 485

483 486

484 487

485 488

486 489

487 490

488 491

489 492

490 493

491 494

492 495

493 497

494 498

495 499

496 500

497 501

498 502

499 503

500 505

501 506

502 507

503 508

504 509

505 510

506 511

507 512

508 513

509 514

510 515

511 516

512 517

513 518

514 519

515 520

516 521

517 522

518 523

519 524

520 525

521 526

522 527

523 528

524 529

525 530

526 531

527 532

528 533

529 534

530 535

531 536

532 537

533 538

534 539

535 540

536 541

537 542

538 543

539 544

540 545

541 546

542 547

543 548

544 549

545 550

546 551

547 552

548 553

549 554

550 555

551 556

552 557

553 558

554 559

555 560

556 561

557 562

558 563

559 565

560 566

561 567

562 568

563 569

564 570

565 571

566 572

567 573

568 574

569 575

570 576

571 577

572 578

573 579

574 580

575 581

576 582

577 583

578 584

579 585

580 586

581 587

582 588

583 589

584 590

585 591

586 592

587 593

Since 1994, security practitioners around the world have been pursuing a well-known and highly regarded professional credential: the Certified Information Systems Security Professional (CISSP) certification. And since 2001, CISSP For Dummies has been helping security practitioners enhance their security knowledge and earn the coveted CISSP certification.

Today, there are approximately 140,000 CISSPs worldwide. Ironically, some skeptics might argue that the CISSP certification is becoming less relevant because so many people have earned it. But the CISSP certification isn’t less relevant because more people are attaining it; more people are attaining it because it’s more relevant now than ever. Information security is far more important than at any time in the past, with extremely large-scale data security breaches and highly sophisticated cyberattacks becoming all too frequent occurrences in our modern era.

Many excellent and reputable information security training and education programs are available. In addition to technical and industry certifications, many fully accredited postsecondary degree, certificate, and apprenticeship programs are available for information security practitioners. And there certainly are plenty of self-taught, highly skilled people working in the information security field who have a strong understanding of core security concepts, techniques, and technologies. But inevitably, there are also far too many charlatans who are all too willing to overstate their security qualifications, preying on the obliviousness of business and other leaders to pursue a fulfilling career in the information security field (or for other, more-dubious purposes).

The CISSP certification is widely regarded as the professional standard for information security professionals. It enables security professionals to distinguish themselves from others by validating both their knowledge and experience. Likewise, it enables businesses and other organizations to identify qualified information security professionals and verify the knowledge and experience of candidates for critical information security roles in their organizations. Thus, the CISSP certification is more relevant and important than ever before.

Some people say that a CISSP candidate requires a breadth of knowledge many miles across but only a few inches deep. To embellish on this statement, we believe that a CISSP candidate is more like the Great Wall of China, with a knowledge base extending over 3,500 miles — with maybe a few holes here and there, stronger in some areas than others, but nonetheless one of the Seven Wonders of the Modern World.

The problem with lots of CISSP preparation materials is defining how high (or deep) the Great Wall is. Some material overwhelms and intimidates CISSP candidates, leading them to believe that the wall is as high as it is long. Other study materials are perilously brief and shallow, giving the unsuspecting candidate a false sense of confidence while attempting to step over the Great Wall, careful not to stub a toe. To help you avoid either misstep, CISSP For Dummies answers the question, “What level of knowledge must a CISSP candidate possess to succeed on the CISSP exam?”

Our goal in this book is simple: to help you prepare for and pass the CISSP examination so that you can join the ranks of respected certified security professionals who dutifully serve and protect organizations and industries around the world. Although we’ve stuffed it chock-full of good information, we don’t expect that this book will be a weighty desktop reference on the shelf of every security professional — although we certainly wouldn’t object.