CISSP 2024 exam changes in DETAIL!

Рет қаралды 47,754

Күн бұрын

In this video, we delve into the details of the CISSP 2024 exam changes - guiding you to navigate the exam changes with confidence!
00:00:00 Intro
00:01:09 Brief overview
00:03:02 Domain weighting changes
00:03:47 Pass Rate Talk with Lou Hablas
00:07:12 Domain weighting changes
00:08:19 CAT Exam changes
00:09:35 Detailed changes
00:10:58 Domain 1: Security & Risk Management
00:11:29 5 Pillars of Information Security
00:15:14 Sustain
00:15:22 Specific frameworks
00:15:40 Standards
00:16:27 Security control frameworks
00:17:07 ISO 27000 Family
00:18:02 Cyber Kill/Attack Chain
00:19:09 3 Major Enterprise Security Architectures
00:19:24 Merged sub-domains
00:19:32 Moved from removed sub-domain
00:19:46 Added “assess”
00:20:21 New topic
00:21:06 External Dependencies
00:22:53 Minor rewording
00:22:59 Cybersecurity Insurance
00:24:45 Minor rewording
00:24:51 Specific Frameworks
00:25:00 Risk Frameworks
00:25:46 Tampering, counterfeits
00:25:56 Risk associated with the acquisition of products and services
00:27:18 Specific Mitigations
00:27:23 Risk Mitigations
00:30:05 Minor rewording
00:30:10 Example content to review
00:30:34 Periodic content reviews
00:31:06 Domain 2: Asset Security
00:31:17 Domain 3: Security Architecture & Engineering
00:31:35 Keep it simple and small
00:32:51 Merged “Zero Trust” & “Trust but Verify”
00:35:03 Secure Access Service Edge (SASE)
00:37:19 Operational Technology
00:38:32 Types of ICS
00:38:46 Minor rewording - API
00:38:51 Quantum Key Distribution
00:39:11 Key Distribution
00:41:15 Minor rewording
00:41:25 Brand New Section!
00:41:34 Information System Lifecycle
00:43:12 Clarification from Rob
00:43:37 Information System Lifecycle
00:44:34 Domain 4: Communication and Network Security
00:44:45 Rewording
00:44:50 Anycast
00:45:00 Transmission Methods
00:46:57 IPSec, SSH, SSL/TLS
00:47:10 Converged Protocols (InfiniBand, Compute Express Link)
00:48:57 Transport Architecture
00:50:58 Network Topologies
00:53:05 Planes
00:53:41 Cut-through vs. Store-and-forward
00:54:28 Performance Metrics
00:57:08 Traffic flows
00:57:14 North-south & east-west traffic patterns
00:59:17 Physical Segmentation
01:01:21 Logical segmentation
01:02:51 Micro-segmentation
01:08:25 Edge Networks
01:10:09 Rewording
01:10:16 Software Defined Network (SDN)
01:11:00 Traditional Network
01:11:46 SDN
01:12:45 Virtual Private Cloud (VPC)
01:13:41 Monitoring & management
01:15:35 Rewording
01:15:58 Domain 5: Identity & Access Management
01:16:14 Services
01:17:03 Groups & Roles
01:18:27 AAA
01:20:01 Password-less Authentication
01:20:30 Advantages of password-less authentication
01:21:33 Challenges of password-less authentication
01:21:54 Password Vault
01:23:10 Access Policy Enforcement
01:24:07 Rewording
01:24:11 Service Accounts Management
01:24:47 Domain 6: Security Assessment & Testing
01:24:51 Rewording
01:24:58 Location
01:26:16 Red, Blue, and/or Purple Team
01:27:45 Added “benchmarks”
01:28:02 Location
01:28:09 Domain 7: Security Operations
01:28:14 Rewording
01:28:24 Tuning
01:29:41 Protecting Data at Rest & In Transit
01:30:01 Backup Storage Strategies
01:32:05 Resource Capacity Agreements
01:32:40 Domain 8: Software Development Security
01:32:50 Scaled Agile Framework
01:34:54 Interactive Application Security Testing
01:35:41 Removed cloud service models
01:36:33 The Easiest Way to Pass the CISSP exam!
Join our r/DestCert subreddit for valuable CISSP resources, training advice, support, and to connect with other CISSP professionals!

Пікірлер: 110

@destcert 6 ай бұрын

The mort important and most challenging topic for most people on the CISSP exam is: cryptography. Take our FREE Mini MasterClass on cryptography to learn the fundamentals! You can take our class for free here: destcert.com/mmc-cryptography/yt/

@sagarrastogi2647 5 ай бұрын

When can we expect the updated Book on Amazon. Thank you!!

@mapzie4966 5 ай бұрын

Thanks Rob and Team. I just passed the CISSP exam today @125 questions. Your book and videos were a main factor to my success! Love the layout and explanations. Finally something I can grasp :)

@destcert 5 ай бұрын

Congratulations! Well done passing the exam! Wonderful to hear that our materials helped you in your achievement. Thanks so much for letting us know!!

@usmclongrangebrainsurgeon 6 ай бұрын

Thanks Rob, I passed yesterday on my 3rd attempt!!🎉

@destcert 6 ай бұрын

Awesome! Congratulations!

@ManojKumar-1985 6 ай бұрын

which resources did you use ?

@usmclongrangebrainsurgeon 6 ай бұрын

@ManojKumar-1985 not joking, all of them. Most valuable and in-depth was Sar Greene's video series on O'Reilly. I also loved mindmaps for reemphasizing what I just studied. Best advice is to choose a study plan and stick to it.

@superamario6464 6 ай бұрын

@usmclongrangebrainsurgeon congrats! Going for mines in March

@usmclongrangebrainsurgeon 6 ай бұрын

@superamario6464 Good luck; take as many practice tests as possible and try to find your weak spots because that's exactly what the real exam will do.

@ShawnCottier 6 ай бұрын

Made it to the end, yeah!! I took the exam about 2 months ago knowing I wasn't ready. (Wasn't able to reschedule since it was less than 24 hours, 22 to be exact (they don't play) my fault). I was right on par with where i thought I was in the study process doing well but need more time. I will be taking it again in the next few month and am using your materials now that I have found them. Thank you so much for all this information!

@JustAsaph 6 ай бұрын

wow - production on this video is insane. randomly stumbled on this while researching to take the test on 2nd attempt. this visuals are engaging. hoping it makes a difference for me in my studies. thank you!

@gus_leon 6 ай бұрын

Very enlightening and helpful. Thank you for putting together all these updates for the CISSP 2024 exam for all of us. Awesome job!

@devsoni2937 Ай бұрын

Big thanks to you Rob and your complete team. I passed the exam on my first attempt. This and the Mindmap videos were the key Review material. Thanks again !! 🙏

@sumpat1 6 ай бұрын

Thanks for these updates, Rob. You are awesome!

@farukm7627 6 ай бұрын

Thanks Rob for a thoroughly detailed look at the 2024 Update. 👋

@user-vs7mq5rv9o Ай бұрын

Rob, I passed today. Big thanks to your mindmap series and 2024 update video. 2021 material is still very relevant. Cheers

@stho1975 5 ай бұрын

Excellent video. Big thank you to you Rob, John and Lou. It must have been massive effort to prepare this. As usual, you and your team explain things to the point so people can easily understand things. Great how you are providing this already few months prior to the change so students can get a good sense of the impact of the changes.

@destcert 4 ай бұрын

Hey, @stho1975! Your kind words are truly appreciated! The whole team is cheering on everyone's success! 🙌

@Dalai33 5 ай бұрын

You are a wonderful teacher!

@oludave 2 ай бұрын

@1:16:00 Sure, it's highly valuable. This is classically detailed. Great content! Thank you.

@CloydLondon12 6 ай бұрын

Thank you for these tips; I appreciate it very much.

@tagelmekonenn 27 күн бұрын

Many thanks for taking your time (which is precious of all things we have) and preparing such a wonderful recap of all the changes. Keep it up!

@TheMrBvcx 2 ай бұрын

Thanks a lot ! Amazing review, fun and really considerate to make content reachable

@manutd9899 3 ай бұрын

Fantastic information. Thanks!

@spottechnologies 2 ай бұрын

so enlightening and helpful. thanks for wonderful video!

@cspiter Ай бұрын

Thanks Rob. Impressive work in this video. Thank you.

@alvarocervantescamacho1979 Ай бұрын

Thanks, really good content. I enjoyed your class as well and will be taking exam soon.

@olumideoginni1978 15 күн бұрын

@John berti, you have always being a great mentor to me, I strongly followed your materials in passing my CISSP exam in 2022...Thanks

@HieuHoTrung 6 ай бұрын

Thank you, Sir.

@michileit 27 күн бұрын

Thank you for this video!

@annabernard4050 4 ай бұрын

Thanks Rob! Just began studying. This is a fantastic resource that I'll be returning to once I'm further into my studies. Yall rock 🤘

@destcert 4 ай бұрын

All the best in your studies, @annabernard4050! We're rooting for you!

@CiaranGilchrist 4 ай бұрын

I passed the exam 12 years ago. Excellent video, it was so good that I should watch a video on what changes were made in the previous exam update. Let me go searching.

@nrvous67 2 ай бұрын

Thanks that was awesome summary

@NovaPrime_00 2 ай бұрын

Thank you Rob

@moveaustrali4462 2 ай бұрын

awesome content. highly recommended

@gurninbongo 3 ай бұрын

Please Don't be offended, after viewing many of your video's and listening to your voice. I was thinking you were a lot younger based on your accent to a British ear. You sound like a late teenage/20's super geek (In a good way) Great videos and very well presented. The slipped in humour and expressive way you present is great. Thanks for sharing :)

@destcert 2 ай бұрын

Haha! Thanks? 😜

@infosectraining 6 ай бұрын

Hi Rob, I really like the way you describe the changes. One question, do you know if the Official guide (9th edition) would change?, after reviewing the official ISC2 web page, it seems they are going to mantain it!

@abuwilliams7228 Ай бұрын

Abou to take my Exams thank you so much for this

@OGForEverProd 3 ай бұрын

When are you guys releasing the new study guide book?

@suzettemcnaught1299 4 ай бұрын

Thank you for these videos which contributed immensely to my preparation . I passed the exam today. 🥳

@destcert 4 ай бұрын

Well-deserved! Congratulations on passing your exam! 👏 We're incredibly proud to hear that our videos played a role in your success. 🙌

@user-pf3dx3nt5t 4 ай бұрын

I really like the way you describe the changes.🙂I think the 2024 version is better to the 2021 version.

@joshevans5127 Ай бұрын

Great series, great video, and great presentation. I'd only like to address the concept of air-gapping as a means of physical segmentation. It's often seen as the "most secure" method of physical segmentation, but I think this has been debunked as a case of "security-by-obscurity". Air-gapped networks of yesteryear often end up no longer forever air-gapped, as sites install jump-boxes for remote access, or OPC connections for data historians, or routine import/export of project files from PLCs or SCADAs. This means that the originally totally isolated network is no longer isolated, as no site can escape the creep of technology into the secure OT realm. If anything, air-gaps prevent the automated updates and patches of systems that would protect them from vulnerabilities. There's obviously a balance, but in the grand scheme, over time, nothing will truly remain air-gapped forever.

@cyb3rh0kage 5 ай бұрын

I just purchased your book yesterday; does your book reflect the new topics as of today?

@Simonius95 5 ай бұрын

Thanks for the awesome video. The way you described product tampering and implant didn't make it 100% clear to me what the difference here is. Any way you can elaborate on that?

@destcert 4 ай бұрын

Thanks for watching, @Simonius95! Product tampering is a broader term that covers any alteration of modification of a product, which includes Implants. Implants more specifically means stealthy inserting / implanting something in hardware or software - a hardware keyloger, or a backdoor / data exfiltration tool in a piece of software.

@eto895 5 ай бұрын

This is really helpful. Interested to join the masterclass.. when is the updated with cissp 2024 Hardcopy book released ?

@destcert 4 ай бұрын

Glad to hear you find our videos helpful! The 2024 version of our Destination CISSP Guidebook is coming out at the end of March. Head over to destcert.com/cissp to know more about our CISSP MasterClass.

@TheBadawii Ай бұрын

Domain 5: Identity and Access Management (IAM) is still the same: (13%) for 2021 and 2024, not (%12) 13%

@veggiebroth5542 3 ай бұрын

I tried to sign up for your masterclass today but your entire website barely loads and freezes up Firefox until I close that tab. Just thought I'd let you know that I couldn't

@sweetcarefulheart 6 ай бұрын

Could you share it in excel ?

@rashondricevans6282 3 ай бұрын

I will not be ready for the exam before the April update. If I purchase the MasterClass, will it be updated when you all update the course?

@destcert 2 ай бұрын

Yes, if you enrol in our MasterClass now, you will have full / free access to the major update to the MasterClass that will go live in about a week

@Xorbh 6 ай бұрын

When will the new book be released for purchasing?

@louhablas3146 6 ай бұрын

We're currently in the process of updating the book and hope to have this done by early January; once done with this, we'll need to get the edited copy to our layout editors - print and epub versions - and they'll likely need at least 2 weeks, but more likely 3-4 weeks to lay everything out as needed. Then, we'll need to review the proofs for accuracy. Assuming all of this goes well, we'll then get final files (print and epub) that can be uploaded to Amazon, etc. for sale. With all of this in mind, we hope to have the updated book available sometime in Feb. Stay tuned.

@MTW11 4 ай бұрын

What is the case if you have to use the restroom during the test? Are you allowed to pause and use the restroom or does the time keep going? I ask as someone who suffers from overactive bladder?

@destcert 4 ай бұрын

You are allowed to take breaks, but the clock keeps ticking. The exam does not pause, so you definitely have to be careful about taking breaks!

@123greenland 5 ай бұрын

Any discount offers for the CISSP masterclass?

@destcert 4 ай бұрын

Hi, @123greenland! We do not offer any discounts. We have priced our class at what we believe is an excellent value. We have spent years and a significant amount of money developing all of our study materials and system. In addition, we provide a lot of personal support, including 1-on-1 personal mentoring calls with our CISSP expert guide, Lou, on our Preferred and Premier CISSP MasterClass.

@trailblazrr2991 6 ай бұрын

They need to add a domain on blockchain security

@superandres100 6 ай бұрын

I’m taking the exam on February. I’m not taking 2024 exam version, am I?

@louhablas8073 6 ай бұрын

You will be taking the 2021 version.

@daniels.7792 6 ай бұрын

Good luck - planning on February myself as well

@alimalhi 3 ай бұрын

When is your new book coming out on new exam curriculum

@destcert 2 ай бұрын

In about a month. The final layout work for printing and ebook takes a fair bit of time!

@prashant490 4 ай бұрын

Rob and team, Need your guidance. Please assist

@destcert 4 ай бұрын

Hi, @prashant490! We'd be more than happy to help you out! Please reach out to us at support@destcert.com.

@jeremy8715 2 ай бұрын

9th edition still valid?

@roberth1637 Ай бұрын

Watch the first 3 and a half minutes (yes).

@fgdavid1 2 ай бұрын

You said bus is prevalent in mindmap but here you say star is prevalent? (TOPOLOGY)

@Fahim___1 6 ай бұрын

Why they give only 4 hours for such a tough certification? It’s a ton of info and the exam questions plus answers are so complicated, tricky and confusing where people need more time. For an exam that cost $749 given only 4 hours, they purposely want people to fail.

@louhablas3146 6 ай бұрын

No, they don't purposely want people to fail. This said, it *IS* a managerial-level exam, and the expectation is for people to be able to assimilate information related to the exam and be able to answer questions accordingly. This speaks to the fact that it is also a reading comprehension exam.

@vico100 6 ай бұрын

Kerberos and SAML have been dropped 😂

@sparcoraceseat 6 ай бұрын

Can’t make sense, those are still relevant isn’t it.

@destcert 6 ай бұрын

While these protocols are no longer specifically called out in 5.6, they are still important single-sign-on and federated identity management protocols and I expect there will continue to be questions about them on the exam