Question 1Security governance principles
A manufacturer is selling one of its divisions, and the division's staff will move to the buyer next month. Which action is MOST important for the seller's security team as the sale closes?
Get ready for the CISSP exam, one domain at a time.
Find your weakest domain in a free 18-minute diagnostic, fix it with a short lesson, then practice manager-level scenario questions with every answer explained.
The only interactive course with a tutor that finds your weak spots and fixes them.
One payment in US dollars. Full refund within 14 days, for any reason.
Free risk calculation drill
SLE, ARO, ALE and whether a safeguard pays for itself. Every question is generated and checked in code, with the working shown. Safeguard questions are on the full drill page.
Work it out, then check.
More free tools
- Domain study plannerYour weeks, your hours and how confident you feel in each domain, turned into hours per domain by the exam weights.
- 15-question diagnosticWeighted like the exam outline: your score in each domain, a lesson on the weakest, and a plan. No account.
- Exam cost and retake plannerThe US$749 fee, the 30, 60 and 90 day retake waits and your earliest retake date.
The eight domains
An adaptive exam of 100 to 150 items in up to 3 hours. Weights are from the April 2024 exam outline.
1. Security and Risk Management
Ethics, governance, law and investigations, policy, business continuity, people, risk analysis, threat modeling and the supply chain.
16% of the exam
2. Asset Security
Classification and handling, data roles, the data lifecycle, retention and destruction, and data protection controls.
10% of the exam
3. Security Architecture and Engineering
Secure design principles, security models, system vulnerabilities, cryptography and its attacks, and facility security.
13% of the exam
4. Communication and Network Security
Secure network design, segmentation, wireless and cellular, network components and secure communication channels.
13% of the exam
5. Identity and Access Management
Access control models, authentication and MFA, federation and single sign-on, and the identity lifecycle.
13% of the exam
6. Security Assessment and Testing
Assessment and audit strategy, vulnerability scans and penetration tests, security metrics and reporting findings.
12% of the exam
7. Security Operations
Investigations, logging and monitoring, incident response, change and patch management, recovery and physical security.
13% of the exam
8. Software Development Security
Security in the development lifecycle, development tools and pipelines, acquired software and secure coding.
10% of the exam
Try one question from each domain
Question 2Data lifecycle
Corbin Mutual uses an outside vendor to destroy retired drives that held customer data. An auditor asks for evidence that each drive was actually destroyed. What is the BEST evidence to obtain from the vendor?
Question 3Cryptographic solutions
A bank's master encryption key must be loaded into a new hardware module. Policy says no single employee may ever know the whole key. Which practice BEST meets this policy?
Question 4Securing network components
A company is installing its first inline IPS in front of an order processing system. Leadership worries that false positives could block real customer orders. What is the BEST deployment approach?
Question 5Identity and access provisioning lifecycle
An audit at Wexley Insurance finds that long-serving staff have kept access from every job they have held. What is the MOST effective long-term fix?
Question 6Analyzing test output and reporting
A system owner asks for a one-year exception from the requirement to encrypt a legacy database, offering network isolation as a compensating control. Who should approve the exception?
Question 7Incident management
At 2 a.m. the on-call responder at Thornbury Water receives an IDS alert about a possible intrusion into the billing network. What should the responder do FIRST?
Question 8Secure coding guidelines and standards
A developer adds detailed logging to a payment API to help troubleshoot failures. The security manager reviews the logging design. Which data should the logs NOT contain?
In the course
- 27 interactive lessons
- 338 practice questions
- 2 full 150-question, 3-hour practice exams
A security path: Network+, Security+, then this course
Network+ and Security+ build the practitioner's base. The CISSP exam asks how a security leader would decide, and ISC2 lets Security+ count for one of its five years of required experience. Each has its own course here.
Network+
Vendor-neutral networking: addressing, routing, switching, wireless, operations and troubleshooting.
Security+
Threats, security architecture, operations and risk at the practitioner level.
Security certification
Practice for the CISSP exam: risk, architecture, identity, operations and secure development, decided as a security leader.
You are here
Guides
Security Leader Genius Pro
US$119one payment
- 27 interactive lessons
- 338 practice questions
- 2 full 150-question practice exams
Full refund within 14 days. Ask within 14 days of paying, for any reason. Our refund promise still applies after you start the course. The note under the pay button is about the separate legal right to cancel. Terms
By paying you agree to our Terms. Email us within 14 days for a full refund.
Take the free diagnostic firstApple Pay, Google Pay or card. Charged in USD.
One payment. No sales tax is added. Access until October 31, 2027.
Questions? support@unigenius.co.uk