- Cursusduur24 uur
- CertificeringCISSP
- Examen/CertificaatCISSP Examen
- TaalEngels
- Online toegang6 maanden
- Waardering
- OrganisatieISC 2
Als IT security professional moet u security kennis hebben van een breed scala aan onderwerpen. Deze CISSP training / cursus bereidt u voor op het halen van het internationaal erkende security certificaat Certified Information Systems Security Professional. Met deze certificering heeft u aantoonbaar brede kennis en praktijkervaring op het vlak van informatie / IT security.
Deze training is in lijn met de 2012 edition van de CISSP certificering. Dit is de meest recente versie.
Uw resultaat
Na het volgen van de training beschikt u over kennis van de verschillende security domeinen die het CISSP certificaat voorschrijft. Ook bent u optimaal voorbereid om het certificeringsexamen met succes af te ronden.
Doelgroep
IT security professionals die de Certified Information Systems Security Professional (CISSP) certificering willen halen.
Inhoud CISSP training
De training / cursus CISSP: Certified Information Systems Security Professional is opgebouwd uit verschillende lessen:
- Identify the types of access control technologies used in a networking environment
- Identify critical activities related to information classification
- Identify knowledge-based authentication technologies
- Identify characteristics-based authentication technologies
- Recognize how single sign-on systems (SSOs) are used for authentication
- Recognize how one-time passwords (OTPs) and smart cards are used for authentication
- Recognize ways of securing passwords
- Identify different types of attack against passwords and password files
- Determine the appropriate type of authentication to implement in a given enterprise scenario
- Evaluate given passwords
- Recognize appropriate access control models given a scenario
- Identify the features of the DAC and MAC access control models
- Recognize how different types of access control technique control access to resources
- Identify the advantages and disadvantages of centralized and decentralized identity management systems
- Identify intrusion detection system (IDS) mechanisms and implementation methods
- Identify intrusion detection and prevention techniques
- Determine the most appropriate access control model to implement in a given scenario
- Recognize access control and intrusion detection techniques
- Recognize the components of a network infrastructure
- Identify the key features of firewall technologies
- Identify the characteristics of TCP/IP
- Match the layers of the OSI model to their functions
- Recognize how specific network attack techniques operate
- Propose a high level security solution for a given scenario
- Define how networks interact
- Specify the type of cable to use in a given scenario
- Recognize LAN transmission considerations
- Identify network topology characteristics
- Recognize features of media access technologies
- Classify statements as characteristics of either synchronous and asynchronous communications
- Recognize LAN and WAN specific devices and technologies
- Match the technologies used by packet-switched networks to their descriptions
- Match the remote access protocols to their functions
- Identify the characteristics of Ethernet
- Recognize how data is transmitted in Token Ring networks
- Recognize the characteristics of the network communications mechanisms and technologies used in an enterprise environment
- Identify currently available VPN protocols
- Specify the most appropriate network components for a given scenario
- Propose a network communication solution for a given scenario
- Match the network protocols to their descriptions
- Recognize how transport layer mechanisms secure network data
- Recognize how different technologies are used to protect data at the application layer
- Identify how to secure network communications in a given scenario
- Distinguish between the technologies that secure the transport and application layers
- Recognize responsibilities related to information security risk management
- Match information security principles with examples of controls used to apply them
- Match the components of a policy framework with their corresponding descriptions
- Identify methodological frameworks for implementing and auditing security controls
- Identify methodological frameworks for performing information security risk assessment
- Distinguish between the results of qualitative and quantitative risk assessments
- Match stages of the risk assessment process with corresponding descriptions
- Label examples of actions taken by a company in response to a risk as either avoidance, transfer, mitigation, or acceptance
- Recognize the appropriate application of risk management concepts
- Distinguish between risk assessment and control methodologies
- Identify responsibilities of an Information Security Officer
- Recognize the advantages and disadvantages of various reporting models
- Recognize how various personnel security strategies work to minimize employee risk
- Recognize strategies for implementing information security training
- Recognize the topics a computer ethics program should address
- Match common computer ethics fallacies to the corresponding correct views
- Recognize the ethical principles that all information security professionals should apply as they do their jobs
- Recognize how to handle organizational issues
- Recognize appropriate actions to implement security awareness training in your organization
- Recognize ethical principles that all information security professionals must apply
- Match issues related to software development with corresponding ways in which they create security vulnerabilities
- Recognize types of attacks used in the enterprise environment
- Determine the appropriate methods to counteract a given attack
- Match types of computer attacks to their corresponding countermeasures
- Match types of malicious code to their corresponding descriptions
- Recognize the purpose of software forensics
- Match types of antivirus software with their corresponding descriptions
- Recognize the type of attack being perpetrated in a given scenario
- Determine the appropriate steps to counteract a given attack
- Recognize the characteristics of knowledge-based systems
- Determine the appropriate development model to use for a given software development project
- Distinguish between various database models and technologies
- Recognize the software development phase a given project team is in
- Determine the appropriate development model to use for a given software development project
- Select the appropriate database model for a given set of criteria
- Define key cryptographic terms
- Identify the characteristics of quantum cryptography
- Match symmetric key algorithms to their corresponding descriptions
- Distinguish between types of asymmetric algorithms
- Determine the appropriate use for a given message format
- Recognize types of ciphers
- Match types of cryptanalytic attack with their corresponding descriptions
- Distinguish between types of algorithms, message formats, ciphers, and cryptanalytic attacks
- Determine the appropriate cryptography implementation for a given scenario
- Determine the appropriate hash algorithm to use in a given scenario
- Recognize characteristics of message authentication codes
- Identify the characteristics of digital signatures
- Identify guidelines for key management and distribution
- Identify characteristics of the XKMS
- Recognize the appropriate application of the split knowledge method of key management
- Recognize methods of key distribution
- Determine the appropriate hashing algorithm to use in a given scenario
- Evaluate the actions of an individual who is practicing key management
- Recognize examples of key management methods
- Recognize the components of a basic information system architecture
- Identify the considerations involved in implementing security architecture
- Recognize key CPU operational factors involved in secure addressing
- Match system operating states to their descriptions
- Differentiate between machine types
- Identify the purpose of the resource manager
- Classify memory types as either RAM or ROM
- Match storage types to their descriptions
- Plan a secure computer network
- Determine the network resources required for a given scenario
- Match the phases of the evaluation process to their descriptions
- Recognize the essential features of operating system protection
- Match the access control mechanism to it's description
- Recognize the methods used to evaluate security in a networking environment
- Identify the key features of security models
- Match key peer-to-peer security issues with their descriptions
- Describe the main security issues associated with grid computing
- Describe the key challenges related to securing data in the cloud
- Identify the questions a potential user of cloud data storage needs to ask when conducting a risk assessment
- Propose an operating system security solution for a given scenario
- Evaluate security in a networking environment
- Determine the appropriate security model for a given scenario
- Describe the security challenges presented by distributed systems
- Recognize the activities involved in securing the operations of an enterprise
- Classify audit measures as either internal or external
- Identify the technologies used to maintain resource availability
- Match the attack type to their potential effects
- Recognize different approaches to securing operations
- Identify how audit trails can be used in operations security
- Differentiate between monitoring tools and techniques
- Define a strategy for securing and maintaining resources for a given scenario
- Secure enterprise operations against network violations for a given scenario
- Identify approaches to examining operations security
- Identify the reasons for resource protection
- Distinguish between e-mail protocols
- Recognize different types of e-mail vulnerability
- Recognize security issues associated with the web interfacing
- Identify the characteristics of technologies for transferring and sharing files over the Internet
- Match the reconnaissance methods to their descriptions
- Identify the key considerations involved in implementing administrative controls
- Specify how to secure media and media storage devices
- Specify the reasons resource and e-mail should be secure
- Propose safer file sharing practices for a given scenario
- Determine how to secure media in a given scenario
- Identify activities that occur during the project initiation phase of business continuity planning
- Recognize considerations for business continuity and disaster recovery planning
- Perform a business impact analysis on given business functions
- Recognize key considerations when conducting a business impact analysis
- Conduct activities related to initiating a project to plan a business continuity and disaster recovery program
- Perform the steps of a business impact analysis given a scenario
- Recognize the considerations that are weighed when determining an appropriate recovery strategy
- Match recovery strategies for business operations to corresponding descriptions
- Match recovery strategies for technology environments to corresponding descriptions
- Recognize the components of a business continuity and disaster recovery plan
- Match test types to their corresponding purposes
- Determine the appropriate recovery strategy, given a scenario
- Recognize elements of a business continuity and disaster recovery plan
- Distinguish between the major categories of computer crime
- Match examples of categories of computer crime to their descriptions
- Recognize the characteristics of various computer-related crimes
- Match the type of intellectual property law that applies to a given scenario
- Match categories of law to their descriptions
- Identify laws related to information security and privacy
- Categorize laws according to the computer crime they protect against
- Determine what type of computer crime has been committed in a given scenario
- Specify the law that protects against a computer crime in a given scenario
- Identify definitions of due care and due diligence
- Recognize the characteristics of computer crime investigations
- Recognize the investigative considerations involved in dealing with computer crime
- Differentiate between ethics and ethical fallacies
- Determine the appropriate processes for investigating a computer-related crime in a given scenario
- Recognize threats to an organization's physical security
- Identify the components of a layered defense system
- Identify perimeter security mechanisms
- Identify the physical security considerations when designing or building a facility
- Match the CPTED strategies to their descriptions
- Propose a security solution for a given scenario
- Determine the design measures that can be taken to increase facility security for a given scenario
- Identify the mechanisms and controls for securing building services
- Match the technologies used by an IDS to their descriptions
- Select the most appropriate intrusion detection technology for a scenario
- Identify the characteristics of a compartmentalized area
- Specify an appropriate strategy for securing compartmentalized areas in a given scenario
- Recognize the features of physical security elements
- Identify the fundamental considerations involved in key control
- Determine the best approach to securing building services for a given scenario
- Identify how to secure a facility and its contents in a given scenario
- Recognize how to implement an effective physical barrier as a security measure
Optionele examentraining (proefexamens)
In aanvulling op deze training kunt u een speciale examentraining aanschaffen. De examentraining bevat verschillende proefexamens die het echte examen dicht benaderen. Zowel qua vorm als qua inhoud. Dit is de ultieme manier om te testen of u klaar bent voor het examen. U kunt deze examentraining optioneel meebestellen door bovenin de optie "Examentraining" op "Ja" te zetten. Lees hier meer over deze examentraining:
Benodigde voorkennis
Het is aanbevolen dat u in het merendeel van de onderwerpen praktijkervaring heeft. Voor het behalen van het certificaat moet u aantonen dat u ten minste 5 jaar praktijkervaring heeft in minimaal twee van de domeinen.
Vragen stellen aan een mentor
In deze training is het mogelijk om, via de mail, vragen te stellen aan een gecertificeerde trainer. U stelt de vragen in het Engels.
Examen via ISC²
U boekt uw examen zelf via de certificeringsorganisatie ISC². Zie de certificeringsbeschrijving voor meer informatie.
Trainingsvorm online training / e-learning
Bij icttrainingen.nl leert u via ons innovatie leerconcept: Social Learning. Hoogwaardige online e-learning trainingen gecombineerd met een online kenniscommunity voor een optimale leerervaring. U kunt na uw bestelling direct online starten. Alle trainingen zijn 24 uur per dag en 7 dagen per week toegankelijk.
> Meer informatie
E-learning
E-learning is een interactieve digitale trainingsvorm. Deze trainingsvorm stelt u in staat om in uw eigen tempo en wanneer het u uitkomt de training te volgen. Het enige dat u nodig heeft is een PC met internettoegang.
Onze E-learning trainingen zijn volledig zelfstandig. U heeft dus geen aanvullende zaken als boeken en dergelijke nodig. Alles wat nodig is voor het succesvol afronden van de training en het eventueel bijbehorende examen is opgenomen in de E-learning training.
Meer informatie over E-learning.
Online kennis community
Tijdens en na uw training heeft u onbeperkt toegang tot de online kennis community. Binnen deze community staat het delen van kennis centraal. U vindt er achtergrondinformatie, artikelen door experts, informatieve filmpjes en discussies voor en door ICT experts. We nodigen u van harte uit deel te nemen aan deze expert community. Meer informatie over de kennis community.
Certificaat van icttrainingen.nl
Na het succesvol afronden van uw training ontvangt u altijd een certificaat van icttrainingen.nl als bewijs dat u de training met succes heeft gevolgd. Dit certificaat kunt u eenmalig, na afronding van de training, zelf genereren en downloaden.
