ISC2 CC Certified in Cybersecurity Exam Prep for Beginners

• ▸ What the Certified in Cybersecurity Credential Is and Who It Is Written For
• ▸ The Five Domains of the Outline Currently in Force and the Weight Each One Carries
• ▸ The Published Exam Format, Item Types, the Two-Hour Limit, and the Reported Passing Score of 700 of 1000 Points
• ▸ Review, Drill, Explained Answer, How the Chapters of This Book Are Meant to Be Worked
• ▸ Finding the Effective Date of the Current Outline and Checking It Yourself
• ▸ What This Book Is Not, An Independent Resource, Not Official Material

• ▸ Building Twenty-Minute Drill Blocks Around a Full Work Week
• ▸ Sequencing the Five Domains When Your Study Time Is Uneven
• ▸ A Paper-Based Spaced Review Cycle for People Who Do Not Want Another App
• ▸ Turning Every Wrong Answer Into the Next Study Session
• ▸ Booking a Date, Confirming What Test Day Requires, and Arriving Prepared
• ▸ Budgeting the Exam Fee and Planning Sensibly Around a Retake

• ▸ The CIA Triad, What Each Leg Protects and How the Three Pull Against Each Other
• ▸ Authenticity, Non-Repudiation, and Accountability as Distinct Ideas
• ▸ Vulnerability, Threat, Risk, and Exposure, Four Words Beginners Merge Together
• ▸ Privacy Versus Security, Where They Overlap and Where They Part Ways
• ▸ Trust Boundaries, Why Every Connection Between Two Systems Is a Decision
• ▸ Encryption, Hashing, and Digital Signatures, What Each Primitive Guarantees
• ▸ Foundational AI Concepts That the Outline Threads Through All Five Domains

• ▸ Scoping the Risk Assessment, Assets, Threats, and Vulnerabilities as Inputs
• ▸ Qualitative and Quantitative Risk, Likelihood, Impact, and the Arithmetic in Plain Terms
• ▸ Four Ways to Treat a Risk and How to Justify the Chosen One
• ▸ Controls by Function, Preventive, Detective, Corrective, Deterrent, and Compensating
• ▸ Controls by Category, Administrative, Technical, and Physical in Everyday Examples
• ▸ Residual Risk and Risk Appetite, Who Decides and Who Signs
• ▸ Risk Decisions Worked Through, Three Scenarios Read Step by Step

• ▸ Policy, Standard, Procedure, and Guideline, Ranking the Documents by Force
• ▸ What a Usable Rule Contains, Scope, Exceptions, and a Review Cycle
• ▸ Frameworks and Control Catalogues, What They Are For and When to Cite One
• ▸ Ownership, Who Owns the Risk, the Data, the System, and the Control
• ▸ Awareness and Training That Hold Up Under Review
• ▸ Metrics and Reporting, Showing Whether the Program Actually Works

• ▸ Categories of Law That Touch Security Work, Criminal, Civil, Administrative, and Contract
• ▸ Privacy in Practice, Personal Data, Consent, and Moving Data Across Borders
• ▸ The ISC2 Code of Ethics and How to Reason Through an Ethics Scenario
• ▸ Vendor and Supply Chain Risk, Questionnaires, Contract Terms, and Ongoing Monitoring
• ▸ Compliance Versus Security, Why Clearing an Audit Is Not the Same as Being Safe
• ▸ Reporting Duties and the Records That Outlive an Incident

• ▸ Identification, Authentication, Authorization, and Accounting, Four Steps in Order
• ▸ The Authentication Factors and Why Two of the Same Kind Do Not Count as Two
• ▸ Password Policy That Actually Helps, Length, Reuse Rules, and Lockout Tradeoffs
• ▸ Biometrics and Behavioural Methods, False Accepts, False Rejects, and the Tradeoff
• ▸ Single Sign-On, Federation, and Tokens Without the Jargon
• ▸ The Identity Lifecycle, Joiner, Mover, Leaver, and Why Deprovisioning Slips

• ▸ Discretionary, Mandatory, and Role-Based Access Control Compared
• ▸ Attribute-Based and Rule-Based Decisions, When They Beat Roles
• ▸ Least Privilege and Privileged Account Management in Practice
• ▸ Separation of Duties, Two-Person Control, and Job Rotation as Safeguards
• ▸ Physical Access Controls, Badges, Turnstiles, Guards, and Tailgating
• ▸ Provisioning Workflows and Access Reviews That Keep the Model Honest

• ▸ What a Network Is Made Of, Hosts, Switches, Routers, and the Path a Packet Takes
• ▸ The Layered Model Without Memorizing Seven Names, What Each Layer Solves
• ▸ Addressing Basics, IP Addresses, Subnets, and Why Private Ranges Exist
• ▸ Ports and Protocols You Have to Recognize and What Each Service Is For
• ▸ Devices on the Path, Firewall, Proxy, Load Balancer, and Where Each Sits
• ▸ Domain Name System and DHCP, The Services That Make Networks Usable
• ▸ Segmentation and DMZs, Why a Flat Network Spreads a Single Mistake

• ▸ Eavesdropping, Man-in-the-Middle, and Spoofing, Mechanics and Countermeasures
• ▸ Denial of Service and Distributed Denial of Service, Attack Shapes and Mitigations
• ▸ How Malware Arrives Over the Network, Phishing, Drive-By, and Command-and-Control
• ▸ Firewalls and Intrusion Detection, Blocking Rules Versus Alerting Rules
• ▸ Virtual Private Networks, What a Tunnel Protects and What It Does Not
• ▸ Wireless Security, Protected Access Modes, Rogue Access Points, and Guest Networks
• ▸ Reconnaissance and Scanning, Why Attackers Start With Information

• ▸ IaaS, PaaS, and SaaS, Putting Each Service Model in Its Place
• ▸ Public, Private, Hybrid, and Community Deployment, What Changes for the Security Team
• ▸ The Shared Responsibility Model Applied to Real Configurations
• ▸ Cloud Identity, Service Accounts, Roles, and Over-Permissioned Access
• ▸ Misconfiguration and Exposed Storage, The Most Common Cloud Failure
• ▸ Virtualization and Containers, How Security Boundaries Move
• ▸ Cloud APIs and Metadata Services, The Attack Surface They Add

• ▸ Logging, What to Collect, How Long to Keep It, and Why Timestamps Matter
• ▸ Security Information and Event Management in Plain Terms
• ▸ Vulnerability Scanning, Assessment, and Prioritizing What Gets Fixed First
• ▸ Patch and Configuration Management, Change Windows, Testing, and Rollback
• ▸ Hardening Endpoints and Servers by Removing What Is Not Needed
• ▸ Asset Inventory as the Foundation of Every Operational Task

• ▸ The Incident Response Lifecycle, Prepare, Detect, Contain, Eradicate, Recover, Learn
• ▸ Triage and Severity, Deciding What Counts as an Incident and Who Gets Called
• ▸ Containment Choices and the Cost of Disconnecting a System
• ▸ Evidence Handling, Order of Volatility and Chain of Custody
• ▸ Business Impact Analysis, Recovery Time Objective and Recovery Point Objective
• ▸ Backups and Restoration Drills, Full, Incremental, Differential, and Snapshots
• ▸ Alternate Sites, Hot, Warm, Cold, and the Work-From-Anywhere Option

• ▸ Deconstructing a Scenario Item, Actors, Assets, and the Question Actually Asked
• ▸ Eliminating Plausible Wrong Answers Before Choosing the Best One
• ▸ Keywords That Reveal Which Domain a Question Lives In
• ▸ When Two Answers Both Seem Right, Choosing the Best Fit
• ▸ Timing and Flagging Across a Full Sitting
• ▸ Recording What You Learned and Choosing What Comes Next

No — this is an independent study guide created to help you prepare. It isn't affiliated with or endorsed by the organization that administers the exam. All names and trademarks belong to their respective owners.

Immediately. Your private access link arrives by email within seconds of checkout, and it never expires.

You get the full guide as a PDF and EPUB, the audiobook as downloadable MP3s, and every study tool as a ready-to-use file. Nothing to install.

Same complete guide. The digital edition gives you instant access right here plus the full toolkit. The Amazon paperback ships to you and unlocks the same toolkit with the code printed inside.

Yes — paid digital purchases on this site are covered by our refund policy. The terms, the time window and how to ask are all on the refund policy page.