SOU-CISSP2.AE1

Certified Information Systems Security Professional (CISSP) - II

Intermediate Self-paced · 1 year access

109 Hands-On LiveLabs

Practice real IT tasks in guided environments.

Real environments
Auto-graded
No installation

01 / Lessons & labs

See exactly what you will learn and practice

Download outline (PDF)

Lessons

22 Interactive Lessons · 174 topics

01 Introduction 2 topics

Overview of the CISSP Exam
Notes on This Course's Organization

02 Security Governance Through Principles and Policies 8 topics · 5 LiveLab

Understand and Apply Concepts of Confidentiality, Integrity, and Availability
Evaluate and Apply Security Governance Principles
Develop, Document, and Implement Security Policy, Standards, Procedures, and Guidelines
Understand and Apply Threat Modeling Concepts and Methodologies
Apply Risk-Based Management Concepts to the Supply Chain
Summary
Exam Essentials
Written Lab

5 LiveLab in this lesson — see the labs panel →

03 Personnel Security and Risk Management Concepts 8 topics · 5 LiveLab

Personnel Security Policies and Procedures
Security Governance
Understand and Apply Risk Management Concepts
Establish and Maintain a Security Awareness, Education, and Training Program
Manage the Security Function
Summary
Exam Essentials
Written Lab

5 LiveLab in this lesson — see the labs panel →

04 Business Continuity Planning 8 topics · 1 LiveLab

Planning for Business Continuity
Project Scope and Planning
Business Impact Assessment
Continuity Planning
Plan Approval and Implementation
Summary
Exam Essentials
Written Lab

1 LiveLab in this lesson — see the labs panel →

05 Laws, Regulations, and Compliance 7 topics · 1 LiveLab

Categories of Laws
Laws
Compliance
Contracting and Procurement
Summary
Exam Essentials
Written Lab

1 LiveLab in this lesson — see the labs panel →

06 Protecting Security of Assets 6 topics

Identify and Classify Assets
Determining Ownership
Using Security Baselines
Summary
Exam Essentials
Written Lab

07 Cryptography and Symmetric Key Algorithms 8 topics · 3 LiveLab

Historical Milestones in Cryptography
Cryptographic Basics
Modern Cryptography
Symmetric Cryptography
Cryptographic Lifecycle
Summary
Exam Essentials
Written Lab

3 LiveLab in this lesson — see the labs panel →

08 PKI and Cryptographic Applications 10 topics · 5 LiveLab

Asymmetric Cryptography
Hash Functions
Digital Signatures
Public Key Infrastructure
Asymmetric Key Management
Applied Cryptography
Cryptographic Attacks
Summary
Exam Essentials
Written Lab

5 LiveLab in this lesson — see the labs panel →

09 Principles of Security Models, Design, and Capabilities 7 topics · 1 LiveLab

Implement and Manage Engineering Processes Using Secure Design Principles
Understand the Fundamental Concepts of Security Models
Select Controls Based On Systems Security Requirements
Understand Security Capabilities of Information Systems
Summary
Exam Essentials
Written Lab

1 LiveLab in this lesson — see the labs panel →

10 Security Vulnerabilities, Threats, and Countermeasures 15 topics · 1 LiveLab

Assess and Mitigate Security Vulnerabilities
Client-Based Systems
Server-Based Systems
Database Systems Security
Distributed Systems and Endpoint Security
Internet of Things
Industrial Control Systems
Assess and Mitigate Vulnerabilities in Web-Based Systems
Assess and Mitigate Vulnerabilities in Mobile Systems
Assess and Mitigate Vulnerabilities in Embedded Devices and Cyber-Physical Systems
Essential Security Protection Mechanisms
Common Architecture Flaws and Security Issues
Summary
Exam Essentials
Written Lab

1 LiveLab in this lesson — see the labs panel →

11 Physical Security Requirements 6 topics

Apply Security Principles to Site and Facility Design
Implement Site and Facility Security Controls
Implement and Manage Physical Security
Summary
Exam Essentials
Written Lab

12 Secure Network Architecture and Securing Network Components 9 topics · 22 LiveLab

OSI Model
TCP/IP Model
Converged Protocols
Wireless Networks
Secure Network Components
Cabling, Wireless, Topology, Communications, and Transmission Media Technology
Summary
Exam Essentials
Written Lab

22 LiveLab in this lesson — see the labs panel →

13 Secure Communications and Network Attacks 16 topics · 15 LiveLab

Network and Protocol Security Mechanisms
Secure Voice Communications
Multimedia Collaboration
Manage Email Security
Remote Access Security Management
Virtual Private Network
Virtualization
Network Address Translation
Switching Technologies
WAN Technologies
Miscellaneous Security Control Characteristics
Security Boundaries
Prevent or Mitigate Network Attacks
Summary
Exam Essentials
Written Lab

15 LiveLab in this lesson — see the labs panel →

14 Managing Identity and Authentication 7 topics · 8 LiveLab

Controlling Access to Assets
Comparing Identification and Authentication
Implementing Identity Management
Managing the Identity and Access Provisioning Lifecycle
Summary
Exam Essentials
Written Lab

8 LiveLab in this lesson — see the labs panel →

15 Controlling and Monitoring Access 5 topics · 2 LiveLab

Comparing Access Control Models
Understanding Access Control Attacks
Summary
Exam Essentials
Written Lab

2 LiveLab in this lesson — see the labs panel →

16 Security Assessment and Testing 7 topics · 6 LiveLab

Building a Security Assessment and Testing Program
Performing Vulnerability Assessments
Testing Your Software
Implementing Security Management Processes
Summary
Exam Essentials
Written Lab

6 LiveLab in this lesson — see the labs panel →

17 Managing Security Operations 8 topics · 2 LiveLab

Applying Security Operations Concepts
Securely Provisioning Resources
Managing Configuration
Managing Change
Managing Patches and Reducing Vulnerabilities
Summary
Exam Essentials
Written Lab

2 LiveLab in this lesson — see the labs panel →

18 Preventing and Responding to Incidents 6 topics · 7 LiveLab

Managing Incident Response
Implementing Detective and Preventive Measures
Logging, Monitoring, and Auditing
Summary
Exam Essentials
Written Lab

7 LiveLab in this lesson — see the labs panel →

19 Disaster Recovery Planning 9 topics · 6 LiveLab

The Nature of Disaster
Understand System Resilience and Fault Tolerance
Recovery Strategy
Recovery Plan Development
Training, Awareness, and Documentation
Testing and Maintenance
Summary
Exam Essentials
Written Lab

6 LiveLab in this lesson — see the labs panel →

20 Investigations and Ethics 6 topics · 1 LiveLab

Investigations
Major Categories of Computer Crime
Ethics
Summary
Exam Essentials
Written Lab

1 LiveLab in this lesson — see the labs panel →

21 Software Development Security 7 topics · 7 LiveLab

Introducing Systems Development Controls
Establishing Databases and Data Warehousing
Storing Data and Information
Understanding Knowledge-Based Systems
Summary
Exam Essentials
Written Lab

7 LiveLab in this lesson — see the labs panel →

22 Malicious Code and Application Attacks 9 topics · 11 LiveLab

Malicious Code
Password Attacks
Application Attacks
Web Application Security
Reconnaissance Attacks
Masquerading Attacks
Summary
Exam Essentials
Written Lab

11 LiveLab in this lesson — see the labs panel →

Hands-On Labs Our edge

109 LiveLabs

Encrypting the Disk
Encrypting a File or Folder
Configuring Audit Group Policy
Completing the Chain of Custody
Assigning Permissions to Folders
Identifying risk actions

Understanding elements of risk
Identifying steps in quantitative risk analysis
Configuring Standard Access Control List
Configuring Extended Access Control List
Identifying phases in BCP process
Identifying CFAA provisions
Checking the integrity of messages through MAC values
Identifying asymmetric algorithms
Identifying cryptographic attacks
Using OpenSSL to Create a Public/Private Key Pair
Observing an SHA-Generated Hash Value
Observing an MD5-Generated Hash Value
Identifying sequence of sender's process in digital signature system
Understanding PKCS standards
Identifying Information models
Identifying protection mechanisms
Identifying OSI layer functions
Identifying OSI layers
Identifying steps in the encapsulation/decapsulation process
Identifying connectionless communication
Identifying abbreviations for various Internet layer protocols
Identifying TCP/IP protocol layers
Identifying TCP/IP layers
Identifying flag bit designator
Using Windows Firewall
Configuring Linux Firewall Using Iptable
Identifying gateway firewalls
Identifying hardware devices
Connecting systems to the Internet through a router
Identifying firewall techniques
Identifying types of cable
Identifying components of a coaxial cable
Identifying network topologies
Identifying UTP categories
Identifying steps in CSMA technology
Identifying LAN sub technologies
Configuring IPSec
Configuring VLAN
Identifying secure communication protocols
Identifying authentication protocols
Identifying phreaker tools
Identifying security solutions
Configuring a VPN
Identifying VPN protocols
Configuring Static NAT
Configuring Dynamic NAT
Understanding NAT
Identifying switching technology properties
Identifying specialized protocols
Understanding transparency
Understanding security boundaries
Performing ARP Spoofing
Identifying types of Denial of Service attacks
Identifying access control types
Identifying authorization mechanisms
Restricting Local Accounts
Identifying drawbacks of Kerberos authentication
Identifying components of the Kerberos authentication protocol
Identifying authentication services
Identifying responsibilities
Reviewing an Authorization Letter for Penetration Testing
Identifying attacks
Identifying social engineering attacks
Configuring User Access Control Setting
Scanning Ports Using Metasploit
Exploiting Windows 7 Using Metasploit
Enabling a Keylogger in a Target Machine
Conducting Vulnerability Scanning Using Nessus
Using nmap for Scanning
Identifying terms associated with data destruction
Identifying steps within an effective patch management program
Identifying steps in incident response management
Enabling Intrusion Prevention and Detection
Configuring Snort
Identifying malicious attacks
Working with a host-based IDS
Identifying sequence in which the IDS instructs the TCP to reset connections
Performing DoS Attack with SYN Flood
Identifying RAID level characteristics
Identifying processing sites in disaster recovery plan
Identifying disaster recovery plan tests
Taking a Full Backup
Taking Incremental Backup
Configuring RAID 5
Identifying computer crime types
Identifying stages in a waterfall lifecycle model
Understanding object-oriented programming terms
Identifying levels in Software Capability Maturity Model
Identifying testing methods
Identifying primary phases of SDLC
Identifying keys in a database
Identifying storage types
Causing a DarkComet Trojan Infection
Identifying types of viruses
Identifying types of viruses
Using the John the Ripper Tool
Using Social Engineering Techniques to Plan an Attack
Attacking a Website Using XSS Injection
Conducting a Cross-Site Request Forgery Attack
Exploiting a Website Using SQL Injection
Understanding application attacks
Defending against IP Spoofing
Using Burp Suite

Labs run in your browser — nothing to install.

Prepare for Certified Information Systems Security Professional (CISSP) - II

One-time payment. Full access for 1 year. Start with a free trial if you want to look around first.

1 year of full access
109 LiveLab included
Certificate of completion

Try Free

No credit card required

Certified Information Systems Security Professional (CISSP) - II

109 Hands-On LiveLabs

See exactly what you will learn and practice

Lessons

Hands-On Labs Our edge

You might also like

Prepare for Certified Information Systems Security Professional (CISSP) - II