CISSP OSG NOTES

Certified Information Systems Security Professional (CISSP)

本书简介

涉及领域

• 安全与风险管理
• 资产安全
• 安全架构与工程
• 通信和网络安全
• 身份鉴别管理(IAM)
• 安全评估测试
• 安全操作
• 软件开发安全

不过，要在实际的CISSP考试中通过,依旧取决于实际工作的经验和实力。

考试资格

You should have the necessary five years of full-time paid work experience (or four years if you have a college degree) in two or more of the eight domains covered by the CISSP exam.(ISC) 2 also allows for a one-year reduction of the five-year experience requirement if you have earned one of the approved certifications from the (ISC) 2 prerequisite pathway. These include certifications such asCAP, CISM, CISA, CCNA Security, Security+, MCSA, MCSE, and many of the GIAC certifications. For a complete list of qualifying certifications, visit https://www.isc2.org/Certifications/CISSP/Prerequisite-Pathway.

Note: You can use only one of the experience reduction measures, either a college degree or a certification, not both.

考试资格需要你有5年以上的相关(指以上8个领域的两个及以上)全职工作经验,或美国大学相关专业毕业亦或者获取了相关的认证,那么4年以上工作经验也具备考试资格。

相关认证列表：

• Certified Authorization Professional (CAP)
• Certified Business Continuity Professional
• Certified Cloud Security Professional (CCSP)
• Certified Computer Examiner (CCE)
• Certified Cyber Forensic Professional (CCFP)
• Certified Ethical Hacker v8 or higher
• Certified Forensic Computer Examiner (CFCE)
• Certified Fraud Examiner (CFE)
• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)
• Certified Internal Auditor (CIA)
• Certified Penetration Tester (GPEN)
• Certified Protection Professional (CPP) from ASIS
• Certified in Risk and Information Systems Control (CRISC)
• Certified Secure Software Lifecycle Professional (CSSLP)
• Certified Wireless Security Professional (CWSP)
• Cisco Certified Network Associate Security (CCNA Cyber Ops)
• Cisco Certified Network Associate Security (CCNA Security)
• Cisco Certified Network Professional Security (CCNP Security)
• Cisco Cyber Security Specialist Program
• CIW – Security Analyst
• CIW Web Security Professional
• CIW Web Security Specialist
• CompTIA Advanced Security Practitioner (CASP)
• CompTIA Security+
• CyberSecurity Forensic Analyst (CSFA)
• GIAC Certified Enterprise Defender (GCED)
• GIAC Certified Firewall Analyst (GCFW)
• GIAC Certified Forensic Analyst (GCFA)
• GIAC Certified Forensics Examiner (GCFE)
• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Intrusion Analyst (GCIA)
• GIAC Global Industrial Cyber Security Professional (GICSP)
• GIAC Information Security Fundamentals (GISF)
• GIAC Information Security Professional (GISP)
• GIAC Mobile Device Security Analyst (GMOB)
• GIAC Penetration Tester (GPEN)
• GIAC Security Essentials Certificate (GSEC)
• GIAC Security Leadership Certification (GSLC)
• GIAC Systems and Network Auditor (GSNA)
• HealthCare Information Security and Privacy Practitioner (HCISPP)
• Information Security Management Systems Lead Auditor (IRCA)
• Information Security Management Systems Principal Auditor (IRCA)
• Juniper Networks Certified Internet Expert(JNCIE-SEC)
• Master Business Continuity Professional (MBCP)
• Microsoft Certified IT Professional (MCITP)
• Microsoft Certified Solutions Associate (MCSA)
• Microsoft Certified Systems Engineer (MCSE)
• Systems Security Certified Practitioner (SSCP)

it deals more with theory and concept than implementation and procedure. It is very broad but not very deep. To successfully complete this exam, you’ll need to be familiar with every domain but not necessarily be a master of each domain.

CISSP考试有以理论为主,每一个领域都需要熟悉但不必精通

考试细则

• 考试费用: 699$
• 考试时长: 3小时
• 考试模式: 机考
• 考试题型: 选择题为主
• 预约考试地址：https://www.pearsonvue.com.cn/Clients/ISC2.aspx

考试中途是可以休息的,这个时间会算作考试时间之内;奇葩的是居然可以带吃的喝的,不过必须把它们放在指定区域,考试不允许带电子设备,手腕上不允许佩戴任何东西或者装饰物,准备一件外套,有的考试地点有时候会有点冷;考试语言有多种语言,包括中文,当然英文过关的话,可以直接采用英文考试.一旦通过考试还得需要找一个已经找人做信用背书,保证简历的真实性.