Security Models: Bell-LaPadula and Biba
Formal security models are mathematical descriptions of what a secure system is allowed to do, and two of them dominate the exam because they are exact mirrors of each other. Bell-LaPadula protects confidentiality and therefore worries about secrets flowing downward to people who are not cleared for them. Biba protects integrity and worries about bad data flowing upward and contaminating trusted information. Each expresses its concern as a rule about reading and a rule about writing, and once you fix which property each model is defending, the rules stop being memorization and become obvious.
Exam tip. Decide first whether the question is about secrecy or about trustworthiness of data. Secrecy means Bell-LaPadula, so no read up and no write down. Data quality means Biba, so no read down and no write up. If the scenario mentions separation of duties or transactions inside an application, the answer is Clark-Wilson, and if it mentions competing clients or conflict of interest it is Brewer-Nash.
Cryptography Fundamentals: Symmetric, Asymmetric and Hashing
Every cryptographic question reduces to picking the right tool for the property you need. Symmetric encryption is fast and uses one shared key, which makes it the workhorse for bulk data and a nightmare for key distribution. Asymmetric encryption uses a mathematically related key pair, solves distribution elegantly, and is far too slow for volume. Hashing has no key at all and produces a fixed-length fingerprint that proves integrity. Real systems combine all three in a hybrid arrangement: asymmetric crypto to agree on a key, symmetric crypto to protect the traffic, and hashing to prove nothing was altered.
Exam tip. Non-repudiation is the giveaway word. It can only come from asymmetric cryptography, because a shared symmetric key means either party could have produced the message. If a question wants confidentiality for a large file, the answer is symmetric, and if it wants confidentiality plus proof of origin, expect a hybrid answer that signs with the sender's private key and encrypts with the recipient's public key.
PKI: Certificates, Digital Signatures and Revocation
Public key cryptography only works if you can trust that a public key really belongs to the party it claims to. Public Key Infrastructure solves that with a trusted third party who vouches for the binding by signing a certificate. From there everything else follows: how identity is verified before issuance, how a certificate is checked at use time, and how it is withdrawn when the private key is compromised. Digital signatures rest on the same foundation, combining a hash for integrity with private key encryption for authenticity and non-repudiation.
Exam tip. Remember that a digital signature does not encrypt the message, it only proves who sent it and that it was not altered. If a question needs both confidentiality and non-repudiation, look for the answer that signs with the sender's private key and then encrypts with the recipient's public key. When a private key is compromised, the correct first action is revocation, not waiting for expiry.
Trusted Computing: TCB, Reference Monitor and Common Criteria
Underneath every secure system design sits a small set of components that everything else has to trust, and the discipline is about keeping that set small enough to verify. The Trusted Computing Base is that collection of hardware, firmware and software. Within it, the reference monitor is the abstract concept that mediates every access, and the security kernel is its actual implementation. Common Criteria then provides the vocabulary for independently evaluating whether a product's security claims hold up, which is the language procurement questions on the exam are written in.
Exam tip. The three required properties of a reference monitor are tested directly: tamperproof, non-bypassable and verifiable. A higher EAL means a more rigorous evaluation, not a more secure product, and that distinction is a favourite distractor. Any answer that relies on keeping a design secret is wrong.
Physical Security: Site Design, Fire and Power
Physical security is where the exam is most explicit that life safety comes before every other consideration. Nothing else in the CISSP body of knowledge outranks protecting people, so any answer that trades human safety for asset protection is automatically wrong. Beyond that principle, this area is a set of very concrete facts: how layered site design pushes an intruder through successive barriers, how fires are classed and which suppression agent suits each, and the specific vocabulary for the ways electrical power fails.
Exam tip. Human safety is the top priority in every physical security question, so an answer that locks people inside a burning building is wrong no matter what it protects. Preaction sprinklers are the standard answer for data centres, and if a scenario mentions tailgating, the control being asked for is an access control vestibule combined with awareness training.