topic Re: 01 May 2021 CBK for cissp exam in CISSP Study Group

01 May 2021 CBK for cissp exam

K65hn9 — Thu, 07 Jan 2021 23:08:24 GMT

When will be the books for the new exam outline available.
What are the possible references one should read regarding the updated CBK.

Re: 01 May 2021 CBK for cissp exam

denbesten — Sat, 09 Jan 2021 05:25:15 GMT

Historically, the old books have worked just fine when the exam version changes. The exam is a test of your experience and critical thinking skills, not a test of your ability to memorize a book.

(ISC)² does maintain a list of suggested references. To save @rslade the effort of replying I will also mention that Ross Anderson's ~~Slade's~~ Security Engineering is also an extremely good reference, for which the prior version is available as a free PDF.

Re: 01 May 2021 CBK for cissp exam

mllamoso — Fri, 08 Jan 2021 06:44:46 GMT

@denbesten where can we get the free PDF?

Re: 01 May 2021 CBK for cissp exam

CraginS — Fri, 08 Jan 2021 13:20:03 GMT

@mllamoso wrote:
@denbestenwhere can we get the free PDF?

Craig

Re: 01 May 2021 CBK for cissp exam

CraginS — Fri, 08 Jan 2021 14:25:30 GMT

@denbesten wrote:
...
. To save @rslade the effort of replying I will also mention that Ross Slade's Security Engineering is also an extremely good reference, for which the prior version is available as a free PDF.

I think William meant Ross Anderson's ....

Craig

Re: 01 May 2021 CBK for cissp exam

denbesten — Sat, 09 Jan 2021 05:29:08 GMT

@CraginS wrote:

I think William meant Ross Anderson's ....

Yep. Thanks for catching that. I fixed the original message.

Re: 01 May 2021 CBK for cissp exam

denbesten — Sat, 09 Jan 2021 05:35:35 GMT

@mllamoso wrote:
@denbestenwhere can we get the free PDF?

Um, on the Internet. Is this a trick question? If you need a hint, read the link in my original reply.

Re: 01 May 2021 CBK for cissp exam

sg2278 — Wed, 10 Feb 2021 12:42:00 GMT

I bought the third edition. I have not read it all.

Re: 01 May 2021 CBK for cissp exam

sg2278 — Wed, 10 Feb 2021 12:44:11 GMT

I am having trouble reading this as a book. I feel like each sentence I need to stop and make a flash card.

Re: 01 May 2021 CBK for cissp exam

sg2278 — Wed, 10 Feb 2021 12:48:25 GMT

That should have said I bought 3rd edition "Security Engineering" by Ross Anderson ISBN 978-1-119-64278-7. Hard cover book.

Re: 01 May 2021 CBK for cissp exam

rslade — Wed, 10 Feb 2021 18:50:37 GMT

> sg2278 (Newcomer I) posted a new reply in CISSP Study Group on 02-10-2021 07:44

> I am having trouble reading this as a book. I feel like each sentence I need
> to stop and make a flash card.

OK, that's not necessarily a bad thing. At least you know that it's working: the
book is worth it because it is challenging you.

I'm a wee bit concerned about you saying that you need to make flash cards.
That's not necessarily a bad thing: it could be the way that you learn, and it
definitely cements the material as you consider *how* to make a flash card. But
brute memorization isn't the point. Make sure that you are understanding the
fundamental concepts as you go. (And, possibly, making flash cards might be the
way to do that ...)

======================
rslade@gmail.com rmslade@outlook.com rslade@computercrime.org
"If you do buy a computer, don't turn it on." - Richards' 2nd Law
"Robert Slade's Guide to Computer Viruses" 0-387-94663-2
"Viruses Revealed" 0-07-213090-3
"Software Forensics" 0-07-142804-6
"Dictionary of Information Security" Syngress 1-59749-115-2
"Cybersecurity Lessons from CoVID-19" CRC Press 978-0-367-68269-9
============= for back issues:
[Base URL] site http://victoria.tc.ca/techrev/
CISSP refs: [Base URL]mnbksccd.htm
PC Security: [Base URL]mnvrrvsc.htm
Security Dict.: [Base URL]secgloss.htm
Security Educ.: [Base URL]comseced.htm
Book reviews: [Base URL]mnbk.htm
[Base URL]review.htm
Partial/recent: http://groups.yahoo.com/group/techbooks/
http://en.wikipedia.org/wiki/Robert_Slade
https://is.gd/RotlWB http://twitter.com/rslade
http://blogs.securiteam.com/index.php/archives/author/p1/

Re: 01 May 2021 CBK for cissp exam

Mario60540 — Thu, 11 Feb 2021 01:28:57 GMT

Re: 01 May 2021 CBK for cissp exam

sg2278 — Mon, 15 Feb 2021 00:32:30 GMT

Mario,

Thank you. You are correct. After I thought about your answer I adjusted my thinking. Instead of reading a sentence, paragraph, and chapter and going over every scenario that I thought they could ask a question about the content instead I asked what is the overall concept of that paragraph. What is the main point/concept being made.

I was also comparing protocols and devices used at the OSI layers from different books. I decided to go with
"The Official (ISC)2 CISSP CBK Reference) 5th ed. I like how this book includes the attack vectors common for each layer.

If you have some questions on the OSI model layers that firewalls fit into:

Application Firewalls is layer 7 Application Layer

Application Firewalls could also be called Proxies "Forward and Reverse Proxies"

Stateful filtering firewall Layer 5

Packet filtering firewall is Layer 3

Layer 5 and Layer 7 are proxy because they can block.

two types of Proxy Firewalls Circuit level (layer 5) and Application (Layer 7)

Is the above correct or do I need to go back and reread?

Is there a difference between Circuit level proxy and Circuit layer firewall?

Thank you for any help / guidance