ExamGraph · Exam
Certified Information Systems Security Professional (CISSP)
Eight domains, one manager's mindset. See exactly which CISSP domain will fail you — then close it.
ExamGraph turns Certified Information Systems Security Professional (CISSP) into a living heatmap of everything you need to know. Start free and every answer lights up the graph — weak topics glow red, mastered ones turn green. Drill the reddest first and watch your Pass Probability climb, 5 minutes a day.
479questions59topics70%pass threshold
What it covers
Security and Risk Management
- Professional Ethics & the ISC2 Code
- Security Concepts: CIA, Authenticity, Nonrepudiation
- Security Governance Principles
- Legal, Regulatory, Privacy & Investigation Types
- Policies, Standards, Procedures & Guidelines
- Business Continuity & Business Impact Analysis
- Personnel Security Policies
- Risk Management Concepts
- Threat Modeling, Supply Chain Risk & Awareness
Asset Security
- Information & Asset Classification
- Asset Handling, Inventory & Data Roles
- Data Lifecycle, Retention & Sanitization
- Data Security Controls & Compliance
Security Architecture and Engineering
- Secure Design Principles
- Security Models
- Evaluation Criteria & System Security Capabilities
- Architecture Vulnerabilities & Mitigations
- Cryptographic Solutions
- PKI, Key Management & Cryptanalytic Attacks
- Site & Facility Security
- Information System Lifecycle
Communication and Network Security
- OSI & TCP/IP Models, Addressing & Ports
- Secure Protocols: TLS, IPsec, SSH, DNSSEC
- Wireless, Cellular & Content Distribution Networks
- Segmentation, SDN & Zero Trust
- Secure Network Components
- Secure Communication Channels & Remote Access
Identity and Access Management (IAM)
- Physical & Logical Access to Assets
- Identification & Authentication
- Authentication Systems: Kerberos, RADIUS, TACACS+
- Federated Identity & SSO: SAML, OIDC, OAuth
- Identity & Access Provisioning Lifecycle
Security Assessment and Testing
- Assessment, Test & Audit Strategies
- Vulnerability Assessment
- Penetration Testing
- Security Control Testing Techniques
- Security Process Data & Metrics
- Test Output, Reporting & SOC Reports
Security Operations
- Investigations & Digital Evidence
- Logging & Monitoring
- Foundational Security Operations Concepts
- Configuration, Change & Patch Management
- Incident Management & Detective/Preventive Measures
- Recovery Strategies
- Disaster Recovery, BCP Exercises & Personnel Safety
Software Development Security
- SDLC Methodologies & Maturity Models
- Development Ecosystems & DevSecOps
- Assessing Software Security Effectiveness
- Acquired Software Security
- Secure Coding Guidelines & Weaknesses
Ready to see where you stand on Certified Information Systems Security Professional (CISSP)?
Start free — no signup