Certified Information Systems Security Professional (CISSP) Practice Test
Gana confianza para Certified Information Systems Security Professional (CISSP). Practica los conceptos, comprende las respuestas y refuerza tus conocimientos pregunta a pregunta.
Probar una preguntaDescripción y detalles del examen
El Certified Information Systems Security Professional (CISSP) es la certificación más reconocida a nivel global en la industria de la seguridad de la información, administrada por (ISC)². Esta credencial de élite valida la profunda competencia técnica y gerencial de un profesional de TI para diseñar, implementar y gestionar un programa de ciberseguridad de excelencia, cubriendo ocho dominios como Security and Risk Management, Asset Security, Security Architecture and Engineering, Communication and Network Security, Identity and Access Management, Security Assessment and Testing, Security Operations y Software Development Security. Obtener el CISSP demuestra maestría en el Common Body of Knowledge (CBK) y dedicación a la profesión, siendo un requisito para puestos senior de seguridad y reconocida por el Departamento de Defensa de EE.UU. bajo la Directiva 8570.01-M, lo que la hace esencial para contratistas gubernamentales y altamente valorada en sectores como finanzas, salud y tecnología.
Preguntas de Muestra
Elige una respuesta y consulta la explicación para ver cómo funciona la práctica.
Pertaining an off-site information processing facility, which of the following statements is TRUE?
The security department should be involved in which stage of the application development process?
To provide accountability, which of the following is required?
The act of notifying the appropriate parties to take action in determining the extent of an incident's severity and remediating the incident's effects is part of _________.
Which of the following statement is the best definition of a Computer Security Incident Response Team (CSIRT)?
Oportunidades profesionales y salario
Los rangos son cifras del mercado de EE. UU. salvo que se muestre un rango local.
Qué temas cubre este examen
Usa las ponderaciones publicadas de los dominios para planificar tu estudio. Los resultados de práctica no predicen tu puntuación en el examen de certificación.
01Security and Risk Management
This domain covers security governance, risk management processes, compliance, and business continuity planning to ensure organizational security posture.
Temas
- Risk management
- Security governance
- Compliance
- Legal issues
- Ethics
- BCP
- Policies
02Communication and Network Security
Addresses securing network communications, protocols, architectures, and implementing controls for data transmission and network defense.
Temas
- Network security
- Secure protocols
- Network attacks
- Communication channels
03Identity and Access Management (IAM)
Covers authentication, authorization, identity management, and access controls to ensure only authorized users access resources.
Temas
- Access control models
- Authentication
- Authorization
- Identity management
- Accountability
04Security Architecture and Engineering
Involves designing and engineering secure systems, including security models, architectures, and engineering principles for system protection.
Temas
- Security models
- Cryptography
- Physical security
- Site planning
- System vulnerabilities
05Security Operations
Encompasses operational security practices, incident response, disaster recovery, and ongoing monitoring to maintain security operations.
Temas
- Security operations
- Incident management
- Disaster recovery
- Forensics
- Logging
06Security Assessment and Testing
Includes conducting security assessments, vulnerability testing, penetration testing, and evaluating the effectiveness of security controls.
Temas
- Security testing
- Vulnerability assessment
- Penetration testing
- Auditing
- Code review
07Software Development Security
Focuses on integrating security into the software development lifecycle, including secure coding, application security, and vulnerability mitigation.
Temas
- SDLC security
- Application testing
- DevSecOps
- API security
- Database security