CISSP Exam Cram (2nd Edition) [Kindle Edition]

Michael Gregg (Author)

Editorial Reviews

Product Description

Updated for 2009

 

Covers the critical information you’ll need to know to score higher on your CISSP exam!

• Build and manage an effective, integrated security architecture
• Systematically protect your physical facilities and the IT resources they contain
• Implement and administer access control
• Use cryptography to help guarantee data integrity, confidentiality, and authenticity
• Secure networks, Internet connections, and communications
• Make effective business continuity and disaster recovery plans, and execute them successfully
• Address today’s essential legal, regulatory, and compliance issues
• Master the basics of security forensics
• Develop more secure applications and systems from the ground up
• Use security best practices ranging from risk management to operations and auditing
• Understand and perform the crucial non-technical tasks associated with IT security

About the Author

As the founder and president of Superior Solutions, Inc., a Houston-based IT security consulting, auditing, and training firm, Michael Gregg has more than15 years experience in information security and risk management. He holds two associate’s degrees, a bachelor’s degree, and a master’s degree. Some of the certifications he holds include the following: CISSP, CISA, CISM, MCSE, CTT+, A+, N+, Security+, CNA, CCNA, CIW Security Analyst, CCE, CEH, CHFI, CEI, DCNP, ES Dragon IDS, ES Advanced Dragon IDS, and SSCP.

 

Michael has experience not only in performing security audits and assessments, but also is the co-author of Build Your Own Security Lab by Wiley Publishing. Other publications he has authored include CISSP Practice Questions Exam Cram, CISA Exam Prep, and CEH Exam Prep 2. Michael is a site expert for TechTarget.com websites and also serves on their editorial advisory board. His articles have been published on IT websites including CertMag.com, CramSession.com, and GoCertify.com. Michael has created security, audit, and IT networking course material for various companies and universities. Although audits and assessments are where he spends the bulk of his time, teaching and contributing to the written body of IT security knowledge is how Michael believes he can give something back to the community that has given him so much.

 

He is a member of the American College of Forensic Examiners and the Information Systems Audit and Control Association. When not working, Michael enjoys traveling and restoring muscle cars.

See all Editorial Reviews

Product Details

• Format: Kindle Edition
• File Size: 4823 KB
• Publisher: QUE; 2 edition (March 10, 2009)
• Sold by: Amazon Digital Services
• Language: English
• ASIN: B001VLXNGA
• Text-to-Speech: Enabled
• Average Customer Review: 3.3 out of 5 stars  See all reviews (10 customer reviews)
• Amazon Best Sellers Rank: #63,817 Paid in Kindle Store (See Top 100 Paid in Kindle Store)

More About the Author

Michael Gregg is COO of Superior Solutions, Inc. (www.thesolutionfirm.com), a Houston based information security assessment, penetration testing, and IT security training firm. Mr. Gregg is responsible for helping corporations establish and validate enterprise wide information security programs and controls. He is an expert on cyber security, networking, and Internet technologies.

While consulting consumes a large amount of Michael's time, he has contributed to more than 10 books and has spoken at security, technology, and educational conferences such as ISC2's Security Leadership Conference, Hacker Halted, Government Technology Conference (GTC), National Credit Union Administration (NCUA) IT Conference, and The American College of Forensic Examiners.

Michael has appeared in numerous media outlets including The New York Times, Fox News, Canadian News (BNN), Kiplinger as well as NPR, ESPN, and other major networks. He holds two associate's degrees, a bachelor's degree, and a master's degree. He presently maintains many certifications including CISSP, CISA, CISM, etc.

Customer Reviews

Most Helpful Customer Reviews

5 of 5 people found the following review helpful:

4.0 out of 5 stars Excellent book as an intro to CISSP, November 9, 2009

By 

Kenton A. Groombridge - See all my reviews
(REAL NAME)   

This review is from: CISSP Exam Cram (2nd Edition) (Paperback)

I have many years of first had experience with IT security and thought that studying for and taking the CISSP would take little effort. CISSP is a mile wide and an inch deep as far as how it covers material. A key is to get over how to read the question and give them exactly what they are looking for because there may be more than two correct answers; one is just more correct.

It is a great book that has questions in the style as they are asked on the CISSP. I answered a lot of questions, on material I knew very well, incorrectly. I was answering as a technician, not a manager. This book taught me how to "READ" the question and give them the "BEST" answer from a manager perspective. For the material, I used using two other books, the Shon Harris, and the Sybex CISSP guides, and passed the CISSP on my first attempt.

A few individuals gave this book low reviews because it lacked content. This book isn't meant to teach the material.

Taking an unknown test such as the CISSP can be intimidating, but if you want to get an idea of how the questions are worded on the test, this is the book. If you just use this book without any other study material or knowledge, you will fail.

2 of 2 people found the following review helpful:

1.0 out of 5 stars Book is OK, CD is really bad, August 26, 2010

By 

Engineering Geek (Orlando FL) - See all my reviews

This review is from: CISSP Exam Cram (2nd Edition) (Paperback)

The test CD is OK with respect to how it works. But the way it reports your results from a practice exam is horrible. You can't tell if you're doing well or not. It just keeps track of how many questions out of the entire question database (for a domain) you've answered right. For example, let's use the Telecommuncations domain. For your first practice exam, you tell it you want 50 questions. You know that it will select the questions randomly, and so does the CISSP exam. You're looking for an indication of pass/fail. If you get 45 right, does it tell you you got a 90%? No, it tells you that you got something like 9%. That's 9% of the total database of about 300 questions. Until you've taken either a huge number of practice exams or one huge one, you don't know if you would pass a randomly-selected exam. Not a good system.

2 of 2 people found the following review helpful:

4.0 out of 5 stars A must for initial review of the CISSP domains, August 3, 2009

By 

rvuzaki101 (Alexandria, VA United States) - See all my reviews

This review is from: CISSP Exam Cram (2nd Edition) (Paperback)

Sure, there are books out there that have a much higher page count, but is anyone really excited about reading 1,000 plus pages. At around 600 pages, front to back, the CISSP Exam Cram is compact, easy to read, and digestible. That is the strength of this book is that it is packed with valuable exam-specific material and is easy to read. Its simplicity allows the reader to gain a good understanding of some of the more complex security concepts. In my experience I have always used more than one resource when studying for certification exams and for the CISSP this is one I would recommend. Use it as a first time review or a last minute cram before the exam.