Security Certification Exam Prep

What this page covers

This page collects study material for security certifications. The resources are grouped around exams that the titles themselves mention: Security+, CISSP, CISM and CASP+. Most of the page is quizzes, with a smaller set of mind maps, flashcards, notes and one flowchart.

Where to start

Begin with a map, so you can see the shape of the exam. The mind map CISSP Domians lists the domains, from access control and cryptography to software development security. If you are working toward Security+, the Security + Domains map does a similar job.

Next, learn the vocabulary. The ISACA CISM Exam Glossary deck runs from acceptable use policy to the Advanced Encryption Standard. Acronyms Security+ is a good deck for abbreviations.

Using quizzes and maps together

1. Read one map, such as the notes on laws, regulations and compliance in CISSP Domain 1, which sets out criminal, civil and administrative law.
2. Take a quiz on the same area, for example CISM Domain 3 (1-35), which asks who is best placed to advocate an information security program.
3. Note each question you miss and go back to the map or deck for that term.
4. Repeat with the next block, such as CISM Domain 3 (36-70).

The scenario quizzes, such as Cassie 125-150, ask you to choose an action in a company situation. Try them once you know the domain terms.

Where this unit sits

This unit belongs to the strand Governance, Risk, Law and Professional Practice in the Cybersecurity subject. That fits the many resources on risk management, legal and regulatory issues and security programs. Teachers can use the quizzes and maps as ready-made practice material for a certification class.

Your next step

Pick one exam, open its map, then try a quiz. When you are ready, build your own flashcards for the terms you keep missing.