CISSP is an abreviation for Certified Information Systems Security Professional. It is a certification offered by the International Information Systems Security Certification Consortium, AKA: (ISC)^2.
3
votes
0answers
81 views
Suggested books to study for CISSP? [duplicate]
Possible Duplicate:
Good (preferably free) resource for CISSP practice questions
I intend to study to take the CISSP exam within the next few months. Could anyone who's taken the CISSP ...
1
vote
1answer
197 views
CISSP Certification [duplicate]
Possible Duplicate:
Good (preferably free) resource for CISSP practice questions
I am currently reviewing and aiming for a CISSP certification on the fourth quarter of this year. I've been ...
4
votes
6answers
549 views
Information Security Career tracks - Academically vs. IT certifications
I will try to be as straightforward as possible here.
I am currently working as a security integrator at an integration company.
I work with products of vendors like Check Point, Cisco, Juniper, HP, ...
2
votes
2answers
183 views
Legal Risk to unpatched servers
Since one of the 10 domains on the CISSP is legal/governance, I figured this would be the best place to ask.
I recently did a security assessment for a non-profit. I found that their systems needed ...
2
votes
0answers
291 views
Best way to get “into the security industry”? [duplicate]
Possible Duplicate:
What are the career paths in the computer security field?
I've been called a "jack of all trades" guy, who has been working in health care and finance for about seven ...
3
votes
3answers
242 views
How do I clearly distinguish between groups of formal and informal models?
I'm currently studying for the CISSP exam and would like to ensure that I'm using proper terminology when referring to models. I'm a little confused because I'm coming across generic and specific ...
8
votes
1answer
151 views
What is a practical example of an action that violates the non-interference model?
I'm studying the non-interference model as part of CISSP prep and am having trouble thinking of a practical example where a violation would be involved (and the consequences of those violations).
I ...
4
votes
2answers
127 views
Is it correct to consider audits as exclusively “detective” in nature?
I'm studying for the CISSP exam and one of the video lecture points didn't quite make sense to me. The instructor was discussing access control administration areas and began categorizing certain ...
4
votes
1answer
438 views
Is it correct to consider Task Based Access Control as a type of RBAC?
I'm studying for CISSP certification and one of the video lectures I viewed (CBT Nuggets) really confused me. Here are some excerpts from the lecture:
"Role Based Access Control doesn't
...
5
votes
3answers
774 views
Why does the ★-property rule of the Bell-Lapadula Model allow information to be stored in objects with HIGHER sensitivity labels?
I'm self-studying for the CISSP exam and am having difficulty wrapping my mind around the practical side of the ★-property rule in the Bell-Lapadula Model. I understand the mechanics of it and that ...
11
votes
6answers
3k views
How useful is CISSP to a recent graduate?
I am a recent graduate and would like to move into the IT Security field. My degree was just straight CS with no particular security focus.
I have recently acquired a copy of a CISSP study guide and ...
17
votes
6answers
3k views
Good (preferably free) resource for CISSP practice questions
I'm looking to sit for my exam in a few weeks, and I want to have a good set of practice tests to bounce against and make sure that I'm up to par with the types of questions that will be asked.
