ISC2 · CISSP
Selecting controls and system security capabilities
CISSP · Lesson 11 of 34 · 1:17:43
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISC2 CISSP exam, on the 2027 outline. In this lesson: selecting controls from system requirements, the Common Criteria and evaluation assurance levels, authorization of systems, memory protection, data execution prevention, address space layout randomization, TPMs, HSMs, and virtualization. Includes three original practice questions.
Preview the topics
- A vendor’s product was evaluated at EAL 4 under the Common Criteria. What does the evaluation assurance level describe?
- Larkspur’s certificate authority needs its private signing key generated and used inside tamper-resistant hardware, without the key ever leaving it in clear text. What fits?
- After testing, Larkspur’s leadership formally accepts the remaining risk of a new system, and approves its use. What is this step?