← All certifications
CCisc2

ISC2 Certified in Cybersecurity

ISC2 Certified in Cybersecurity official-source-aligned practice bank.

Official study guide
Free — no charge
5 modules360 practice questions

Domain 1: Security Principles

Study the official objectives for Domain 1: Security Principles.

24%
1.1 - Understand cybersecurity concepts1.2 - Understand risk management concepts1.3 - Understand governance concepts1.4 - Understand cybersecurity controls1.5 - Maintain professional and ethical conduct

1.1 - Understand cybersecurity concepts

Intermediate20 min

Review the official skills for 1.1 - Understand cybersecurity concepts and practice applying them to scenarios.

Confidentiality:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Integrity:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Availability:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Authentication, Authorization, Accounting (AAA):
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Non-repudiation:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Privacy:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline

1.2 - Understand risk management concepts

Intermediate20 min

Review the official skills for 1.2 - Understand risk management concepts and practice applying them to scenarios.

Risk management lifecycle:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Risk management processes:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline

1.3 - Understand governance concepts

Intermediate20 min

Review the official skills for 1.3 - Understand governance concepts and practice applying them to scenarios.

Regulations and laws:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Frameworks and guidelines:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Policies, standards (e.g., International Organization for Standardization (ISO), Center for Internet Security), procedures:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline

1.4 - Understand cybersecurity controls

Intermediate20 min

Review the official skills for 1.4 - Understand cybersecurity controls and practice applying them to scenarios.

Technical controls:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Administrative controls:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Physical controls:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline

1.5 - Maintain professional and ethical conduct

Intermediate20 min

Review the official skills for 1.5 - Maintain professional and ethical conduct and practice applying them to scenarios.

Professional code of conduct:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Due care and due diligence:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
ISC2 Code of Ethics:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline

Domain 2: Security Governance

Study the official objectives for Domain 2: Security Governance.

17.3%
2.1 - Plan Governance, Risk, and Compliance (GRC)2.2 - Understand redundancy2.3 - Understand security awareness2.4 - Measure cybersecurity effectiveness

2.1 - Plan Governance, Risk, and Compliance (GRC)

Intermediate20 min

Review the official skills for 2.1 - Plan Governance, Risk, and Compliance (GRC) and practice applying them to scenarios.

Purpose:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Importance:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Frameworks and tools:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline

2.2 - Understand redundancy

Intermediate20 min

Review the official skills for 2.2 - Understand redundancy and practice applying them to scenarios.

Business Continuity (BC):
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Disaster Recovery (DR):
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline

2.3 - Understand security awareness

Intermediate20 min

Review the official skills for 2.3 - Understand security awareness and practice applying them to scenarios.

Organizational culture (e.g., importance of security, security leadership):
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Concepts (e.g., social engineering, password protection, phishing):
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline

2.4 - Measure cybersecurity effectiveness

Intermediate20 min

Review the official skills for 2.4 - Measure cybersecurity effectiveness and practice applying them to scenarios.

Key metrics, Key Risk Indicators (KRI):
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Dashboards, score cards, reports:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline

Domain 3: Identity And Access Management (IAM) Concepts

Study the official objectives for Domain 3: Identity And Access Management (IAM) Concepts.

20%
3.1 - Understand identity life cycle management3.2 - Understand logical access controls

3.1 - Understand identity life cycle management

Intermediate20 min

Review the official skills for 3.1 - Understand identity life cycle management and practice applying them to scenarios.

Roles definition:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Provision:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Review:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Deprovision:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Frameworks and tools:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline

3.2 - Understand logical access controls

Intermediate20 min

Review the official skills for 3.2 - Understand logical access controls and practice applying them to scenarios.

Principle of Least Privilege (PoLP):
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Separation of Duties (SoD):
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Access control models:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline

Domain 4: Networking and Cloud Security Concepts

Study the official objectives for Domain 4: Networking and Cloud Security Concepts.

21.3%
4.1 - Understand network security4.2 - Understand network security architecture4.3 - Understand cloud security

4.1 - Understand network security

Intermediate20 min

Review the official skills for 4.1 - Understand network security and practice applying them to scenarios.

Concepts (e.g., Open Systems Interconnection (OSI) model, Transmission Control Protocol/Internet Protocol (TCP/IP) model, Internet Protocol version 4 (IPv4), Internet Protocol version 6 (IPv6), Virtual Private Network (VPN)):
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Firewalls (e.g., ports, applications):
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Wireless (e.g., Wi-Fi, Bluetooth):
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Embedded systems (e.g., Industrial Control System (ICS)), Internet Of Things (IoT):
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline

4.2 - Understand network security architecture

Intermediate20 min

Review the official skills for 4.2 - Understand network security architecture and practice applying them to scenarios.

Comprehending network segmentation (e.g., Firewall zones, Virtual Local Area Network (VLAN), micro-segmentation):
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Defense in Depth:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Zero Trust (ZT):
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline

4.3 - Understand cloud security

Intermediate20 min

Review the official skills for 4.3 - Understand cloud security and practice applying them to scenarios.

Characteristics (e.g., Broad network access, rapid elasticity, measured service, on-demand self-service, resource pooling):
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Service models:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Deployment models:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Shared security model (e.g., roles and responsibilities):
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline

Domain 5: Security Operations and Incident Response

Study the official objectives for Domain 5: Security Operations and Incident Response.

17.3%
5.1 - Understand data security5.2 - Understand security operations5.3 - Understand Incident Response (IR)5.4 - Understand asset protection5.5 - Understand security testing

5.1 - Understand data security

Intermediate20 min

Review the official skills for 5.1 - Understand data security and practice applying them to scenarios.

Data handling (e.g., classification, labeling, masking, and sanitization):
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Encryption (e.g., symmetric, asymmetric, hashing, quantum resistant cryptography):
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline

5.2 - Understand security operations

Intermediate20 min

Review the official skills for 5.2 - Understand security operations and practice applying them to scenarios.

Logging and monitoring security events:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Security event triage (e.g., incident use cases, prioritization, correlation):
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Threat actors (e.g., types, motivations):
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Cyber threat intelligence:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Threat frameworks:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline

5.3 - Understand Incident Response (IR)

Intermediate20 min

Review the official skills for 5.3 - Understand Incident Response (IR) and practice applying them to scenarios.

Data handling policy implementing Incident Response Plan (IRP):
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Incident Response (IR) exercises (e.g., testing, tabletop):
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline

5.4 - Understand asset protection

Intermediate20 min

Review the official skills for 5.4 - Understand asset protection and practice applying them to scenarios.

Asset lifecycle management (e.g., End Of Life (EOL) software and devices):
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Configuration and change management:
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline

5.5 - Understand security testing

Intermediate20 min

Review the official skills for 5.5 - Understand security testing and practice applying them to scenarios.

Security readiness testing (e.g., blue teaming, purple teaming, red teaming):
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Application testing (e.g., vulnerability scanning, static analysis, dynamic analysis, threat modeling):
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline
Physical penetration testing (e.g., phishing, tailgating, impersonation):
https://xmc-prod-vercel.isc2.org/certifications/cc/cc-certification-exam-outline