CISSP certification preparation
A clearer way to prepare for the CISSP.
Build your knowledge across all eight CISSP domains with structured lessons, original scenario-based questions and realistic mock exams.
CISSP domains
practice questions
flashcards
The eight CISSP domains
Domain 1 · 15%
Security and Risk Management
Governance principles, ethics, legal/regulatory issues, personnel security, risk management, threat modeling, and business continuity.
Domain 2 · 10%
Asset Security
Classifying and handling information and assets across their lifecycle: ownership roles, data states, retention, and secure destruction.
Domain 3 · 13%
Security Architecture and Engineering
Secure design principles, security models, cryptography, PKI, and physical security including embedded and industrial systems.
Domain 4 · 13%
Communication and Network Security
OSI/TCP-IP models, secure network components, wireless/cellular/IoT convergence, and network attack-defense strategies.
Domain 5 · 13%
Identity and Access Management (IAM)
Controlling subjects' access to objects: models, authentication factors, AAA protocols, federation, and attack resistance.
Domain 6 · 11%
Security Assessment and Testing
Designing assessment programs, selecting testing techniques, analyzing results, and leveraging internal/third-party audits such as SOC reports.
Domain 7 · 13%
Security Operations
Running security day-to-day: investigations and logging, incident response, BC/DR operations, provisioning and patching, and people safety.
Domain 8 · 12%
Software Development Security
Embedding security across the SDLC and DevSecOps, protecting development environments, acquiring third-party/open-source code safely, and avoiding common vulnerabilities.
Learn
Follow concise lessons and connect concepts across the security lifecycle.
Practise
Answer original questions and study detailed rationales after submission.
Review
Use spaced review and mock exams to build confidence under time pressure.
PassYour is an independent study aid and is not affiliated with, endorsed by or sponsored by ISC2.