For the certification it is important to know where you are in the organization and answer the questions from that viewpoint. You are a risk adviser or a IT security manager, answer all questions with that in mind. Governance vs. Management Governance – This is C-level Executives (Not you). Stakeholder
Having top-down IT security leadership in an organization is key to success. If we do not have the buy-in of senior leadership, we will do a mediocre job at best. For the CISSP certification questions assume a top-down organization. In a new survet (ISC)² Finds IT Professionals are an Underutilized
MAC (Mandatory Access Control): Often used when Confidentiality is most important. Almost always used in the military or in organizations where confidentiality is very important, rarely used in the private sector (unless in defense contracting). Access to an object is determined by labels and clearance Labels: Objects have Labels assigned
RBAC (Role Based Access Control): Often used when data integrity is most important. Most large organizations use role based access control, your access levels are determined by your job role. Policy neutral access control mechanism defined around roles and privileges. A role is assigned permissions, and subjects in that role
I just published 4 full 250 question CISSP certification practice exams, no repeating questions. For the launch they are marked down from $75 to $10! Take the practice test, find your weak areas, study those and then take it again, rinse/repeat as much as needed. The questions and answers are randomized
Sunflower cheat sheet for the CISSP certification. 37 pages of quick references and mnemonic tricks. Download from my facebook group. Mahalos for making it Maartenn de Frankrijker!