Home/Certifications/ISC2
The ISC2 certification series
CC, SSCP, CCSP and CISSP. Every domain mapped to the current exam outline, written in plain English, with the practice questions printed in the same book.
Choose your path
The ISC2 credentials stack. CC needs no experience at all, SSCP needs one year, and CCSP and CISSP both sit at five.
Entry • no experience
The one ISC2 credential with no prerequisite. A two hour exam on the fundamentals, and the usual first step into security.
Official weights · outline 1 Oct 2025
Practitioner • 1 year
For the people who run and monitor systems rather than set policy: SOC analysts, administrators, security engineers.
Official weights · outline 1 Oct 2025
Specialist • 5 years
Co-developed with the Cloud Security Alliance, for practitioners who already have the fundamentals and now secure cloud platforms.
Official weights · outline 1 Oct 2025
Senior • 5 years
The senior credential, and the widest: eight domains and sixty-two numbered objectives, each with its own section.
Official weights · outline 15 Apr 2024
What is included
The books differ in length and in how practice is arranged, because the exams differ. Everything else is the same in all four.
Chapters follow the certifying body's own outline, and each numbered objective gets its own section with a scoping paragraph, the explanation and Key Takeaways.
CC 17 · SSCP 36 · CCSP 36 · CISSP 62Callouts sit beside the concept they belong to, flagging the terminology distinctions ISC2 tests and the answers that look right under time pressure.
Throughout every chapterQuestions are printed with the answer key in the same volume, written to the ISC2 BEST, MOST and FIRST scenario style and tagged to the domain they came from.
2,411 questions across four titlesDelivery, item count, time limit, scoring and the published domain percentages, then a domain-weighted study plan for where the remaining hours should go.
Front matter, every titleLook inside
This is page 101 of the CISSP guide, objective 8.3. Every section in every title is built from the same five parts. Select a marker to see what each one does.
Marker 1 · The objective heading
The heading is not ours. 8.3 Assess the effectiveness of software security is objective 8.3, lifted from the ISC2 exam outline exactly as ISC2 numbers it. Because every objective is a section, the table of contents is the exam blueprint: you can read the contents page and know you have covered every testable topic.
Marker 2 · The explanation
Each concept leads with the term set in bold, then says what it is and what it is for. The paragraph on this page opens with Auditing and logging of changes and explains what the version control system, the CI/CD pipeline and the issue tracker each record, then why the three together answer a question the exam asks.
Together these provide a longitudinal view: are security findings increasing or decreasing? How long do security defects remain open? What classes of vulnerabilities recur?Verbatim from page 101
Marker 3 · Exam Tip
Exam Tips sit beside the concept they belong to, not in an appendix. Each one names the distinction ISC2 tests, which on a scenario question is usually the difference between an answer that is correct and the answer that is best.
Exam Tip. Recurring vulnerability classes in audit data are a training-and-tooling signal, not just a defect signal. The right answer addresses the cause (developer training, framework choice, tooling), not just each instance.Verbatim from page 101
Marker 4 · Common Pitfall
Common Pitfalls do the opposite job: they name the plausible answer that costs you the mark. On an adaptive exam you cannot go back and reconsider, so these are placed where you first meet the idea rather than at the end of the chapter.
Common Pitfall. Measuring training completion rather than training outcomes. Completion is necessary but not sufficient; recurrence rates and pre-release defect rates measure outcomes.Verbatim from page 101
Marker 5 · Key Takeaways
Every section closes with Key Takeaways: the shortest version of what you have just read. In a final-week pass you can read only these and still know whether the section needs a second look.
Straight out of the book
Printed here exactly as they appear in the practice sets. Nothing has been simplified for the website.
An organisation's network team is assigning addresses and notices that a server has been configured with the address 192.168.10.50. Which IP version and address class does this BEST represent?
Correct answer: B
192.168.10.50 falls within the 192.168.0.0/16 range, which is an IPv4 private (RFC 1918) address space. Private addresses are not routable on the public internet and are used within internal networks.
The CC guide explains every answer and says why the other three fail. 99 questions, grouped by domain.
After a confirmed ransomware incident, the incident response team has removed all malware artifacts, rotated compromised credentials, patched the exploited vulnerability, and verified that no attacker persistence mechanisms remain. What is the NEXT phase the team should enter?
Correct answer: C
The incident response lifecycle runs in sequence: containment, eradication, recovery, post-incident. All the actions described collectively constitute eradication. Recovery is the next phase: restoring affected systems from clean backups or reimaged baselines, under elevated monitoring. Recovery cannot safely begin before eradication is verified.
The SSCP guide explains every answer the same way. 162 questions, grouped by domain.
Your e-commerce platform, hosted in the cloud, has experienced several Distributed Denial of Service (DDoS) attacks, disrupting service availability. Which of the following measures is most effective in protecting a cloud-based application from DDoS attacks?
Correct answer: B
The CCSP volume carries six full-length mock exams of 150 questions, each matched to the domain weighting and the three hour pacing target, and each ending with an answer key. No question repeats across exams.
Which one of the following security mechanisms provides the BEST way to restrict the execution of privileged procedures?
Correct answer: A
The CISSP volume carries ten full-length mock exams of 125 questions, weighted to the eight domains and matched to CAT exam length, each ending with an answer key. 1,250 questions in total, none repeated.
Side by side
Exam facts come from the certifying body's current exam outline. Book facts come from the printed interior.
| Comparison | CC | SSCP | CCSP | CISSP |
|---|---|---|---|---|
| Level | Entry | Practitioner | Specialist | Senior |
| Experience required | None | 1 year | 5 years IT, 3 in security, 1 in a CCSP domain | 5 years |
| Domains | 5 | 7 | 6 | 8 |
| Numbered objectives | 17 | 36 | 36 | 62 |
| Delivery | Adaptive (CAT) | Adaptive (CAT) | Adaptive (CAT) | Adaptive (CAT) |
| Items | 100 to 125 | 100 to 125 | 100 to 150 | 100 to 150 |
| Time limit | 2 hours | 2 hours | 3 hours | 3 hours |
| Pass mark | 700 / 1000 | 700 / 1000 | 700 / 1000 | 700 / 1000 |
| Practice in the book | 99 by domain | 162 by domain | 900 in 6 mocks | 1,250 in 10 mocks |
| Pages | 158 | 367 | 360 | 414 |
| Written to outline | 1 Oct 2025 | 1 Oct 2025 | 1 Oct 2025 | 15 Apr 2024 |
| Price | $17.99 | $20.99 | $20.99 | $20.99 |
Why Simply Certified
Simply Certified is a study guide series for working professionals who need to certify efficiently, without a two-thousand-page reference. Chapters and practice questions are both mapped to the certifying body's published exam objectives, so your practice results point directly to the domains that need more work.
Questions