In this video, we delve into the details of the CISSP 2024 exam changes – guiding you to navigate the exam changes with confidence!00:00:00 Intro 00:01:09 Brief overview 00:03:02 Domain weighting changes00:03:47 Pass Rate Talk with Lou Hablas00:07:12 Domain weighting changes00:08:19 CAT Exam changes00:09:35 Detailed changes00:10:58 Domain 1: Security & Risk Management00:11:29 5 Pillars of Information Security00:15:14 Sustain00:15:22 Specific frameworks00:15:40 Standards00:16:27 Security control frameworks00:17:07 ISO 27000 Family00:18:02 Cyber Kill/Attack Chain00:19:09 3 Major Enterprise Security Architectures00:19:24 Merged sub-domains00:19:32 Moved from removed sub-domain00:19:46 Added “assess”00:20:21 New topic00:21:06 External Dependencies00:22:53 Minor rewording00:22:59 Cybersecurity Insurance00:24:45 Minor rewording00:24:51 Specific Frameworks 00:25:00 Risk Frameworks00:25:46 Tampering, counterfeits00:25:56 Risk associated with the acquisition of products and services00:27:18 Specific Mitigations00:27:23 Risk Mitigations00:30:05 Minor rewording00:30:10 Example content to review00:30:34 Periodic content reviews00:31:06 Domain 2: Asset Security00:31:17 Domain 3: Security Architecture & Engineering00:31:35 Keep it simple and small00:32:51 Merged “Zero Trust” & “Trust but Verify”00:35:03 Secure Access Service Edge (SASE)00:37:19 Operational Technology00:38:32 Types of ICS00:38:46 Minor rewording - API00:38:51 Quantum Key Distribution00:39:11 Key Distribution00:41:15 Minor rewording 00:41:25 Brand New Section!00:41:34 Information System Lifecycle00:43:12 Clarification from Rob00:43:37 Information System Lifecycle00:44:34 Domain 4: Communication and Network Security00:44:45 Rewording00:44:50 Anycast00:45:00 Transmission Methods00:46:57 IPSec, SSH, SSL/TLS00:47:10 Converged Protocols (InfiniBand, Compute Express Link)00:48:57 Transport Architecture00:50:58 Network Topologies00:53:05 Planes00:53:41 Cut-through vs. Store-and-forward00:54:28 Performance Metrics00:57:08 Traffic flows00:57:14 North-south & east-west traffic patterns00:59:17 Physical Segmentation01:01:21 Logical segmentation01:02:51 Micro-segmentation01:08:25 Edge Networks01:10:09 Rewording01:10:16 Software Defined Network (SDN)01:11:00 Traditional Network01:11:46 SDN01:12:45 Virtual Private Cloud (VPC)01:13:41 Monitoring & management01:15:35 Rewording01:15:58 Domain 5: Identity & Access Management01:16:14 Services01:17:03 Groups & Roles01:18:27 AAA01:20:01 Password-less Authentication01:20:30 Advantages of password-less authentication01:21:33 Challenges of password-less authentication01:21:54 Password Vault01:23:10 Access Policy Enforcement01:24:07 Rewording01:24:11 Service Accounts Management01:24:47 Domain 6: Security Assessment & Testing01:24:51 Rewording01:24:58 Location01:26:16 Red, Blue, and/or Purple Team01:27:45 Added “benchmarks”01:28:02 Location01:28:09 Domain 7: Security Operations01:28:14 Rewording01:28:24 Tuning01:29:41 Protecting Data at Rest & In Transit01:30:01 Backup Storage Strategies01:32:05 Resource Capacity Agreements01:32:40 Domain 8: Software Development Security01:32:50 Scaled Agile Framework01:34:54 Interactive Application Security Testing01:35:41 Removed cloud service models01:36:33 The Easiest Way to Pass the CISSP exam!Join our r/DestCert subreddit for valuable CISSP resources, training advice, support, and to connect with other CISSP professionals!Did you miss our previous article... https://techvideos.club/information-technology/googles-gemini-just-made-gpt4-look-like-a-babys-toy
