D1Security & Risk Management
D2Asset Security
D3Security Architecture & Engineering
D4Communication & Network Security
D5Identity & Access Management
D6Security Assessment & Testing
D7Security Operations
D8Software Development Security

Study resource

CISSP Flashcards

Choose a domain, flip each card, and move through the deck at your own pace.

Domain 1 · 16%

Security and Risk Management

1 / 50

How to study CISSP concepts with flashcards

Flashcards are useful for recalling vocabulary, formulas, and distinctions across the eight CISSP domains. They work best when you explain a term in your own words before flipping the card, then apply it to a security decision. Memorizing a definition alone will not tell you which control, process, or risk response is appropriate in a scenario.

Start with related terms

Compare pairs such as risk appetite and risk tolerance, inherent and residual risk, or RTO and RPO. Say what changes when the business objective changes. If two terms still seem interchangeable, review the associated domain guide before moving on.

Turn recall into a decision

For each card, invent a short workplace example. For “least privilege,” ask who needs access, for what task, and for how long. For “risk acceptance,” ask who has authority to approve the remaining risk and how the decision should be recorded.

A short review routine

  1. Choose one domain and work through a small group of cards without looking at the definitions first.
  2. Write down terms you cannot explain or apply to a realistic scenario.
  3. Revisit those terms after a day, then test your reasoning with the free domain practice questions.

Use the CISSP glossary for a quick definition and the free mock test to practice choosing the best answer across domains. Cyber Exam Pro is an independent study resource and is not affiliated with or endorsed by ISC2.