Introduction

The Advanced CISSP Prep Guide: Exam Q & A pulls together the key elements of the Common Body of Knowledge (CBK) in a format that tests the candidate's knowledge of the CBK prior to sitting for the CISSP examination. The advanced questions address the 10 domains of the CBK, which are

• Security Management Practices
• Access Control Systems
• Telecommunications and Network Security
• Cryptography
• Security Architecture and Models
• Operations Security
• Applications and Systems Development
• Business Continuity Planning and Disaster Recovery Planning
• Law, Investigation, and Ethics
• Physical Security

A recommended approach is to use this text as one of the final steps in consolidating previously studied CISSP examination-related information. For example, after studying the CISSP Prep Guide and completing its list of review questions, the Advanced CISSP Prep Guide: Exam Q & A can be used to evaluate the candidate's true understanding of the material by posing questions of greater difficulty. However, the answers to these advanced questions are explained in great detail to consolidate the information on the subject. Even the incorrect answers are discussed in length, where appropriate, to enhance the learning process. The Advanced CISSP Prep Guide: Exam Q & A was designed to be complementary to the CISSP Prep Guide.

In addition to serving as a tutorial for the subject matter of the advanced questions, the Advanced CISSP Prep Guide: Exam Q & A incorporates additional information on the topics and new information that has emerged since the publication of the CISSP Prep Guide.

The new subjects addressed include

• Carnivore
• Echelon
• The U.S. Patriot Act
• The Digital Millennium Copyright Act (DMCA) and recent rulings
• The European Union Electronic Signature Directive
• The Advanced Encryption Standard
• Biometrics
• The Software Capability Maturity Model (CMM)
• Genetic algorithms
• Wireless security models
• New threat and countermeasure information

In summary, this text will tell you if you have effectively grasped the key concepts associated with the 10 domains of the CBK and will help you identify and review the areas in which more work is required. In addition, this text will give you information on the latest developments in information security through advanced questions and answers focusing on those topics.