Checkpoint CCSPA Study Guide & Review Questions 2008

According to Check Point, CCSPA is a vendor-neutral, entry-level certification that validates proficiency in security fundamentals, concepts, and best practices.

As a Check Point Certified Security Principles Associate (CCSPA), one is expected to have basic knowledge of security issues, risk management, business recovery strategies, the nature of intrusions and attacks and the fundamentals of cryptography. A CCSPA should be responsible for implementing and enforcing an organization's security policies, recognizing network security threats, and recommending security solutions to meet business needs.

The CCSPA certification is relatively theory based. To earn the certification, you need to pass an exam which consists of a series of multiple choice questions. The pass/fail cut score is approximately at 70%. Exam objectives include:

Discuss the Information Security Triad
Explain the relationships between other information security models and the Information Security Triad
Discuss the eight principles of secure design
Explain the security life cycle
Determine what information resources are considered assets
Identify possible threats and vulnerabilities to information assets
Evaluate formulas to determine asset values, and losses to an organization
Investigate risk mitigation strategies for organizations
Establish appropriate countermeasures and safeguards to deploy, and which risks should be mitigated by them
Identify and distinguish between types of security policies
Discuss security policy enforcement, based on policy type
Explain the concepts and actions associated with administering security policies
Discuss how to develop a business continuity plan
Explain methods for testing a business continuity plan
Discuss the life cycle of a business continuity plan
Explain common and uncommon scenarios where a business continuity plan is invoked
Define Operational Security, and review its history
Identify the Laws of OPSEC
Identify adversaries' motivations, and intelligence gathering techniques
Determine Physical and Administrative security controls relating to OPSEC
Discuss the characteristics of confidentiality and integrity access control models
Identify types of access controls and categorize them appropriately
Explain the methods for managing access controls
Review identification and authentication in the context of access control

Discuss the need for security training
Identify the mechanisms for delivering security training
Explain how to effectively communicate security needs to business unit owners, management, and executives
Discuss security architecture theory
Explain system security architecture
Describe secure network architecture
Define an intrusion
Define an attack
Review Intrusion Detection concepts
Determine types of Intrusion Detection Systems
Review a brief history of cryptography
Determine generally how encryption works
Investigate current encryption algorithms
Determine effective base lining techniques
Evaluate the benefits of penetration testing
Identify the major categories of authentication methods
Discuss the characteristics of common access control methods
Compare and contrast access control technologies
Review the administrative components of access control solutions
Determine security issues and solutions for ROBO users
Identify issues with remote user security
Determine security issues and solutions for Small Business users
Identify issues with home user security
Define the purpose of an intranet
Define the purpose of an Extranets
Determine how a Virtual Corporation operates
Security Models
Administrative Controls
Physical Security and OPSEC
Business Continuity Planning
Safeguards and Countermeasures
Assess needs for enterprise encryption technologies
Investigate possibilities for enterprise user management and access controls

Contents updated on Apr 25, 2008.

We utilized the published "official" knowledge domains together with independent research and feedback analysis from successful candidates as our guidelines for developing the content. Our CCSPA Study Guide is designed for reinforcing learning objectives and validating knowledge so you know you're prepared to answer even the toughest technical questions on the actual certification exam.

Instead of just giving you the hard facts, we also give you information that covers the best practices. With these information, you will always be able to make the most appropriate expert judgment in the exam. You will find this product to be challenging and effective, which will help you learn how to recognize computer security threats and recommend proper security solutions. You may use this study guide to directly prepare for the CCSPA exam. You may also use it as a valuable reference to prepare for the CCSA/CCSE exams.

* This study guide has an approximate content page count of 250.

You may review the TOC by clicking HERE.

Study Guide PLUS 115 Practice Questions to drill you in key security technology concepts!!!

All orders come with LIFE TIME FREE UPDATES. Unless otherwise stated, delivery time for all e-book (electronic delivery) orders is 24-hour after payment confirmation. There is no S/H charges for e-book delivery. Sales tax may apply depending on your location.

Subscribe Terms of Use Contact Us