✳ Career & Exam Mastery · 60 Field Lessons · 160 Exam Scenarios
Master the 8 CISSP domains and major security certifications through Principal Engineer field judgment, architecture trade-offs, cheat sheets, and a 160-question exam simulator.
FLAGSHIP BLUEPRINT · 100% COMPLETE COVERAGE
The gold-standard certification for senior security engineers, architects, and technical leaders. Covers all eight Common Body of Knowledge (CBK) domains from quantitative risk math and formal security models to cryptography, network defense, forensics, and secure software architecture.
DOMAIN 1 · 16% EXAM WEIGHT
Confidentiality, integrity, and availability; security governance principles; compliance, legal, and regulatory obligations; professional ethics; security policies, standards, baselines, procedures, and guidelines; business continuity requirements; personnel security; quantitative and qualitative risk management; threat modeling; and supply-chain risk management.
DOMAIN 2 · 10% EXAM WEIGHT
Identify and classify information and assets; information and asset handling requirements; data lifecycle across states (at rest, in transit, in use); data ownership and privacy roles (Owner, Controller, Processor, Custodian); data retention, data remanence, and NIST SP 800-88 media sanitization.
DOMAIN 3 · 13% EXAM WEIGHT
Secure design principles; formal security models (Bell-LaPadula, Biba, Clark-Wilson, Brewer-Nash); TCB, reference monitor, CPU rings, and memory protection; hardware security (TPM, HSM); cloud and virtualization architecture; symmetric/asymmetric cryptography, PKI, and quantum readiness; CPTED, physical facility security, environmental controls, and fire suppression.
DOMAIN 4 · 13% EXAM WEIGHT
OSI and TCP/IP models; secure network protocols (DNS, DNSSEC, HTTP, TLS 1.3, IPsec, SSH, SPF/DKIM/DMARC); network segmentation, firewalls, proxies, IDS/IPS, and zero trust network architecture; wireless security (WPA2/WPA3, 802.1X/EAP); RADIUS vs. TACACS+; SDN, SD-WAN, SASE, and network layer attacks.
DOMAIN 5 · 13% EXAM WEIGHT
Physical and logical access control; identification, authentication, authorization, and accountability (IAAA); federation, SSO, Kerberos, OAuth 2.0, OIDC, and SAML 2.0; access control models (DAC, MAC, RBAC, ABAC, RuBAC); biometrics and CER/FAR/FRR; PAM and identity lifecycle management.
DOMAIN 6 · 12% EXAM WEIGHT
Design and validate assessment, test, and audit strategies; SOC 1, SOC 2, and SOC 3 reports (Type I vs. Type II); vulnerability scanning vs. penetration testing; black-box, gray-box, and white-box testing; SAST, DAST, IAST, RASP, and fuzzing; code coverage metrics; synthetic transactions and continuous audit review.
DOMAIN 7 · 13% EXAM WEIGHT
Understand and support investigations and digital forensics (Order of Volatility, chain of custody, write blockers); logging, SIEM, SOAR, and continuous monitoring; incident management lifecycle; vulnerability and patch management; change and configuration management; RAID, backup strategies (full, incremental, differential), DR recovery sites (cold, warm, hot), and DR testing.
DOMAIN 8 · 10% EXAM WEIGHT
Integrate security in the SDLC (Waterfall, Spiral, Agile, DevSecOps); software maturity models (CMMI, SAMM, BSIMM); CI/CD pipeline separation of duties, SBOM, and supply chain; database security (ACID, relational integrity, polyinstantiation, inference vs. aggregation); OWASP application and AI/LLM security (prompt injection, excessive agency, human oversight).
MULTI-CERTIFICATION BLUEPRINT OVERLAYS
Study the underlying security engineering principles once, then map your preparation across technical, cloud, operational, and governance exams.
ISC2 · ISC2 CISSP CAT Exam Outline (2024–2026 CBK)
The gold-standard certification for senior security engineers, architects, and technical leaders. Covers all eight Common Body of Knowledge (CBK) domains from quantitative risk math and formal security models to cryptography, network defense, forensics, and secure software architecture.
Format: 100 to 150 items (Computerized Adaptive Testing / CAT) · 180 minutes (3 hours) · Passing: 700 out of 1000 scaled points
CompTIA · SY0-701 Exam Objectives
The foundational hands-on practitioner certification validating core cybersecurity skills across general security concepts, threats/vulnerabilities, architecture, operations, and governance.
Format: Maximum of 90 questions (multiple-choice and performance-based questions / PBQs) · 90 minutes · Passing: 750 out of 900
CompTIA · CS0-003 Exam Objectives
Intermediate practitioner certification focused on security operations, behavioral analytics, threat hunting, vulnerability prioritization, incident response, and reporting.
Format: Maximum of 85 questions (multiple-choice and PBQs) · 165 minutes · Passing: 750 out of 900
ISC2 · ISC2 CCSP Exam Outline
Premier cloud security certification covering cloud concepts, shared responsibility, cloud data security, crypto/key management, IAM federation, application supply chain, and cloud legal/audit compliance.
Format: 125 multiple-choice questions · 180 minutes (3 hours) · Passing: 700 out of 1000
ISACA · ISACA CISM Exam Content Outline
Management-focused certification validating expertise in information security governance, enterprise risk management, security program development, and incident management.
Format: 150 multiple-choice questions · 240 minutes (4 hours) · Passing: 450 out of 800 scaled score
ISACA · ISACA CISA Exam Content Outline
Global benchmark certification for IS audit, control assurance, evidence evaluation, systems acquisition testing, and operational resilience verification.
Format: 150 multiple-choice questions · 240 minutes (4 hours) · Passing: 450 out of 800 scaled score
