Introduction

Five Domains of the Exam

  1. General Security Concepts (12%)
  2. Threats, Vulnerabilities, and Mitigations (22%)
  3. Security Architecture (18%)
  4. Security Operations (28%)
  5. Security Program Management and Oversight (20%)

Exam Tips & Tricks

  1. There are no trick questions
  2. Pay attention to emphasized words
  3. When in doubt, pick the answer that is correct for the highest number of situations11. Do not try to psych yourself into picking a less-correct answer.
  4. Understand the key concepts of the test questions
  5. Do not try to memorize terms word-for-word; instead, try to understand them
  6. Everything will be vendor-neutral and generic

  1. Do not try to psych yourself into picking a less-correct answer.↩︎