Search...
Master key concepts with interactive flashcards
What is the CIA Triad?
Click to reveal answer
Confidentiality, Integrity, and Availability - the three fundamental principles of information security. Confidentiality ensures data is accessible only to authorized users, Integrity ensures data accuracy and completeness, and Availability ensures data and resources are accessible when needed.
Click to show question
CISSP is a ISC2 certification. These facts come from the current exam guide and are the numbers to plan around.
| Domain | Weight | What to focus on |
|---|---|---|
| Security and Risk Management | 15% | Security governance, Risk management, Compliance and legal |
| Security Architecture and Engineering | 13% | Security models, Cryptography, Physical security |
| Communication and Network Security | 13% | Network architecture, Secure protocols, Network attacks |
| Identity and Access Management | 13% | Access control, Identity management, Authentication |
| Security Operations | 13% | Incident management, Disaster recovery, Investigations |
| Security Assessment and Testing | 12% | Vulnerability assessment, Penetration testing, Security audits |
| Software Development Security | 11% | Secure SDLC, Security controls, Code review |
| Asset Security | 10% | Data classification, Data handling, Privacy protection |
Yes. You can start CISSP practice and flashcards free without creating an account. A free account keeps your progress, and the full bank (270+ questions) unlocks with a subscription.
They cover all 8 domains of the CISSP exam: Security and Risk Management (15%), Security Architecture and Engineering (13%), Communication and Network Security (13%), Identity and Access Management (13%), Security Operations (13%), Security Assessment and Testing (12%), Software Development Security (11%), Asset Security (10%). Each section is weighted in the same proportion as the real exam, so nothing high-value is buried.
The CISSP exam has approximately 125 questions in 240 minutes, with a passing score of 700. Use the practice questions to confirm you are consistently above that line before booking the real exam.
Study in short, spaced sessions: a card you have not seen for two days is worth more than a card you reread immediately. Filter by Security and Risk Management first, then mix domains so you practise identifying the topic before recalling the definition.
They are the recall half of preparation. Pair the cards with practice questions and at least one timed practice exam — candidates who only review cards usually recognise terms but miss scenario questions.