What Is CISSP?
The eight CBK domains, the adaptive exam, the five-year experience rule and the senior security roles it opens.
Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.
One plain-language guide per certification, 144 in all. Each one walks through the exam domains and their weights, the format and cost, the experience and renewal rules, and the jobs the credential is actually hired for. Read the guide, take the free practice test where there is one, and you will know whether a boot camp is the right next step.
Pick a vendor or search by name or exam code. Every guide covers the domains, the exam and who the credential is for, and links to the free practice test and boot camp.
The eight CBK domains, the adaptive exam, the five-year experience rule and the senior security roles it opens.
Six cloud security domains, the adaptive exam, the experience rules and the CISSP waiver path.
The five domains under the September 2026 outline, the adaptive exam, and why it needs no experience.
Seven hands-on security domains, the one-year experience rule, and how it differs from CISSP.
Formerly CAP: seven domains, the two-year experience rule, and the RMF and authorization roles it fits.
Eight secure software lifecycle domains, the four-year experience rule and the AppSec roles it targets.
The CISSP architecture concentration: four domains, both qualification routes, and the architect roles.
The CISSP engineering concentration: five systems security engineering domains and the federal roles it supports.
The CISSP management concentration: six domains, the CISSP and standalone routes, and the leadership roles.
Both Core exams and what they cover, the renewal path, DoD 8140 status and the IT support roles it launches.
The five domains, exam format, renewal options, DoD 8140 status and the networking roles it qualifies you for.
The five domains, the exam, the coming SY0-801 update, DoD 8140 baseline status and the roles it starts.
The four domains, performance-based questions, DoD 8140 work roles and how it maps to SOC analyst hiring.
The five domains, the hands-on exam, what changed in V3, DoD 8140 status and the offensive roles it opens.
Formerly CASP+: the four domains, the hands-on exam, DoD 8140 work roles and the senior roles it targets.
The first vendor-neutral AI security certification: the four domains, the exam and who it fits.
The six domains and weights, the new DevOps domain, DoD 8140 status, CE renewal and the cloud operations roles it fits.
The five XK0-006 domains, the exam format, the XK0-005 retirement, renewal and how it compares with RHCSA.
The four domains, the exam, the 2025 switch to CE renewal and the server and data center roles it fits.
The five DA0-002 domains, the exam format, what replaced DA0-001, renewal rules and the data analyst roles it fits.
The six domains in the new V2 exam, the DS0-001 retirement dates, renewal and the DBA roles it fits.
The four PK0-005 domains, the 90-question exam, the October 2025 move to CE renewal and how it compares to CAPM and PMP.
The four AT0-001 domains, the 60-minute exam, CE renewal and the automation roles it fits.
The first CompTIA OT security certification, launching December 2026: the six draft domains, the exam and who it fits.
The four domains, the November 2026 outline change, the experience rules, DoD 8140 status and career paths.
The five audit domains, exam format, the five-year experience rule, DoD 8140 status and the audit roles.
The four domains under the November 2025 outline, the exam and scoring, the three-year experience rule and the risk roles it fits.
The four privacy domains, exam format, the three-year experience rule and where privacy engineers fit.
The three domains, the exam, the CISA or CPA prerequisite, and how it differs from AAISM and AIGP.
The three domains, the exam, the CISM or CISSP prerequisite, and how it compares to AIGP.
The four governance domains and their weights, the exam and scoring, the five-year experience rule and the roles it fits.
The five domains and weights, the hybrid exam and its 25 lab questions, the no-experience route and the SOC analyst roles it fits.
The three domains and their weights, the exam, the 27 qualifying designations, and how it compares to CRISC and AAIA.
The eight weighted exam topics, the 75-question exam and $175 fee, the October 2026 switch to COBIT 7 and the roles it supports.
The six exam domains, question formats, recertification options, DoD 8140 status and the network roles it opens.
The core ENCOR exam and six concentration options, what changed in v1.2, and the senior network roles it opens.
The SCOR v2.0 core exam and four concentration options, what changed in August 2026, and the network security roles it opens.
The five 200-201 domains and weights, the exam and fee, the CyberOps name history, DoD 8140 status and the SOC roles it fits.
What v13 covers, the exam format, prerequisites, DoD 8140 status and the offensive roles it opens.
The five executive domains, the exam and its form-based scoring, both eligibility paths and DoD 8140 coverage.
The eight blueprint domains and 20 modules, the 312-38 exam, both eligibility routes and the blue-team roles it fits.
The nine incident-handling domains, the 212-89 exam, the one-year experience route and the incident response roles it fits.
The six forensics domains, the 312-49 exam, the two-year experience route and the investigator roles it fits.
The fully practical 24-hour exam, the LPT (Master) tie-in at 90%, the eight blueprint domains and the offensive roles it fits.
The eight CTIA v2 domains, the 50-question 312-85 exam, the two-year experience route and the threat intelligence roles it fits.
The eight SOC workflow domains and weights, the 312-39 exam, the one-year experience route and the SOC analyst roles it fits.
The eight blueprint domains, the 212-82 exam and its 10 practical questions, the no-prerequisite route and the entry-level roles it fits.
EC-Council's nontechnical AI literacy credential: the five 112-59 domains, the exam, renewal by retest and who it fits.
The six blueprint domains of exam 312-41, the beta exam, both eligibility routes and how it compares to PMP and AIGP.
The five AI governance domains, the 612-51 beta exam, both eligibility routes and the GRC, privacy and audit roles it fits.
The five blueprint domains, the 312-52 beta exam with its five practical questions, both eligibility routes and the AI red team roles it fits.
The business-user credential: exam domains and weightings, and who it is written for.
The developer credential: API, Agent SDK, MCP and the integration domain that carries a third of the exam.
Agentic architecture, orchestration and the Foundations exam blueprint.
Enterprise scope: integration, governance, lifecycle and stakeholder work.
The four Body of Knowledge v2.1 domains, the exam, why there are no prerequisites, and how it compares to ISACA's AI certs.
The five U.S. privacy law domains under the September 2025 blueprint, the exam, the two-year term and who the credential fits.
The six privacy program domains under the September 2025 blueprint, the exam, maintenance rules and the privacy management roles it fits.
The five European data protection domains under the September 2025 blueprint, the exam in three languages, the two-year term and who the credential fits.
The five privacy technology domains under the September 2025 blueprint, the exam, maintenance rules and the engineering roles it fits.
The five skill areas, the exam, the free annual renewal and the cloud roles it supports.
The three domains, the 45-minute exam, why it never expires, and whether to take it or go straight to AZ-104.
The four domains under the October 2026 update, the exam, and who the Microsoft security fundamentals credential is for.
The four design domains and weights, the AZ-104 prerequisite, the free annual renewal and how it compares with the AWS architect certifications.
The three domains under the October 2026 outline, the 100-minute exam, the free annual renewal and the SOC roles it fits in Defender XDR and Sentinel shops.
The four domains under the October 28, 2026 update, the 100-minute exam, the free yearly renewal and the Entra ID roles it fits.
The two domains of the exam that replaced AI-900, the hands-on Foundry half, the $99 fee and why it never expires.
The four domains and weights on the July 2026 outline, the 45-minute exam, why it never expires, and the data roles it leads to.
The five domains under the July 2026 outline, the new Copilot Studio agents domain, the 45-minute exam, and why it never expires.
The three domains, the 45-minute exam, what happened to MS-900, and why this Microsoft 365 fundamentals credential never expires.
The five domains under the October 27, 2026 outline, the 100-minute Intune exam, the free annual renewal and the device management roles it fits.
The four domains under the October 27, 2026 update, the exam, the free annual renewal and where it stands now that MS-102 is retiring.
The five skill areas and weights, the AZ-104 prerequisite, the exam, and the February 1, 2027 retirement in favor of AZ-401.
The five domains on the July 2026 outline, the 100-minute exam, the free annual renewal and the cloud and hybrid networking roles it fits.
The seven domains, the single exam that replaced AZ-800 and AZ-801 in September 2026, and what the change means for current holders.
The four domains under the October 21, 2026 outline, the SC-200, SC-300 or SC-500 prerequisite, the free annual renewal and the security architect roles it fits.
The three Purview domains under the October 28, 2026 outline, the exam, the free annual renewal, and how it replaced SC-400.
The four domains, the 120-minute exam, the free annual renewal, and what changed when SC-500 replaced AZ-500.
The five domains and weights in the October 27, 2026 outline, the 100-minute exam, the free annual renewal and the SQL Server and Azure SQL roles it fits.
The three domains under the October 19, 2026 outline, the 100-minute exam, the free annual renewal and how it compares with PL-300 and DP-700.
The three equally weighted domains, the 100-minute exam, the free annual renewal, and how it compares with DP-600 and the Databricks exam DP-750.
The four domains under the April 2026 outline, the 100-minute exam, the free annual renewal and the Power BI analyst roles it fits.
The four domains, the AB-400 exam that replaced PL-400 in October 2026, and what the switch means for current holders.
The five domains of the April 2026 outline, the 120-minute exam, the free annual renewal and what changed when it replaced AI-102.
The four domains under the October 2026 outline, the 120-minute exam, how it took over from AZ-204, and the back-end developer roles it fits.
The three domains, the 120-minute exam, how it replaced PL-200 in August 2026, and the Power Platform builder roles it fits.
The three Copilot Studio skill areas, a 120-minute exam heavy on MCP, API and multi-agent integration, the $165 fee and the free yearly renewal.
The three domains of the beta exam, the $165 price, the free annual renewal and how it relates to the retiring MS-102.
The seven domains, the 100-minute exam, the January 2026 rewrite, and why this is the one GitHub credential that never expires.
The five domains of the July 2026 rewrite, the English-only 100-minute exam, and the GitHub Enterprise admin roles it fits.
The five January 2026 domains, the 100-minute exam and $99 fee, the two-year validity and the pipeline roles it fits.
The six domains and weights, the 100-minute exam, the August 2026 update, and the two-year renewal now moving to Microsoft.
The six domains from the July 2026 rewrite, the 100-minute exam, the 700 passing score, and the AppSec and DevSecOps roles it fits.
The six agent domains, a 120-minute exam that runs longer than any other GitHub test, the $165 fee, and the 2026 move out of beta.
The four exam domains, the format, recertification and the cloud roles it opens.
The four domains, 65 questions in 90 minutes, the 700 passing score, and who the entry-level AWS credential fits.
The five domains and weights, 65 questions in 90 minutes, the 700 passing score, and the cloud, data and business roles the AI credential fits.
The five domains of the exam formerly called SysOps Administrator, 65 questions in 130 minutes, the 720 passing score, and the operations roles it fits.
The six SCS-C03 domains and weights, 65 questions in 170 minutes, the 750 passing score, and the cloud security roles it fits.
The four domains and weights, 75 questions in 180 minutes, the 750 passing score, and the November 2026 switch to SAP-C03.
The ten weighted SPLK-1002 topics, the 65-question exam, the $130 fee, the move to Cisco registration and the Splunk roles it fits.
The 17 weighted SPLK-1003 blueprint sections, the 56-question exam, the Power User prerequisite and the $130 fee for self-managed Splunk admins.
The 13 weighted domains, 60 questions in 75 minutes, the Power User prerequisite, the $130 fee and the Splunk Cloud admin roles it fits.
The five CNCF domains and weights, the two-hour hands-on exam, the $445 fee with one retake, and the platform roles it fits.
The five developer-focused domains, the performance-based exam, and how it differs from the CKA.
The six security domains, the active-CKA prerequisite, the exam format and the cluster security roles it fits.
The three domains under the July 2026 exam content outline, eligibility routes, the exam and PDU renewal.
The four domains and weights, the 150-question exam, the 23-hour education rule and where the entry-level credential leads.
The four domains of the November 2024 exam, eligibility routes, the 120-item exam and PDU renewal.
Released February 2026: what changed from ITIL 4, the syllabus, the exam and how the bridge path works.
Still on sale in 2026 with a sunset planned for December 31, 2027: the weighted syllabus, the exam, what ITIL 4 holders need to do and how it relates to Version 5.
The three weighted learning outcomes, the 40-question closed-book exam, the training rule and what the planned December 2027 ITIL 4 sunset means.
The customer journey module of ITIL 4 Managing Professional: the 40-question exam, required training and what the planned 2027 sunset means.
Agile, Lean and DevOps under ITIL 4: the 90-minute exam, the accredited training rule, its Managing Professional role and the planned 2027 sunset.
The module shared by ITIL 4 Managing Professional and Strategic Leader: the 40-question exam, prerequisites, the 2027 sunset and the Version 5 route.
The seven weighted audit domains, the 80-question open-book exam, the four credential levels and their audit hours, fees and CPD rules.
The seven weighted domains, the 80-question open-book exam, the four credential tiers and the project hours each one takes.
The five weighted exam domains, the 80-question open-book exam, the four credential levels from Provisional to Senior Lead, and what the 2022 control set changed.
The six competency domains and their published weights, the 80-question open-book exam, the three credential levels and the 90-hour CPD cycle.
The six competency domains and their weights, the 80-question open-book exam, the four experience-based credential levels and the incident management roles it fits.
The seven weighted exam domains, the 80-question open-book exam, the four credential levels and their audit hours, and what the 2025 standalone edition changed.
The seven weighted PIMS domains, the 80-question open-book exam, the four credential levels and their project hours, and the standalone 2025 edition.
The seven weighted exam domains, the 80-question open-book exam, the four credential levels and how it compares to AAIA and AIGP.
The six weighted AIMS domains, the 80-question open-book exam, the four credential levels and their AI project hours, fees and CPD rules.
The seven weighted compliance audit domains, the 80-question open-book exam, the audit hours behind each credential level, fees and CPD rules.
The three weighted GDPR domains, the 80-question open-book exam, the Provisional and full DPO levels and how the scheme maps to Articles 37 to 39.
The entry credential of the CMMC program: six domains, the Tier 3 check, ISACA as the new CAICO, and the road to CCA.
The four assessment domains, the CCP, 612 baseline and Tier 3 prerequisites, ISACA as the new CAICO, and the path to Lead CCA.
The four AIP-210 machine learning domains and weights, 80 items in 120 minutes, ANAB accreditation, renewal and the data roles it fits.
The five CSC-210 domains, the 80-question exam, renewal by retake, DoD 8140 status and the new CSSD successor.
CertNexus's end-user security awareness credential: the four CBS-510 domains, the 25-question online assessment, cost and who it fits.
The five NIST CSF-based domains, the 80-item CFR-410 exam, the no-application eligibility route, DoD 8140 status and the SOC and responder roles it fits.
AI CERTs' one-day AI literacy credential for business users: the eight AC-900 modules, the 50-question exam, yearly recertification and who it fits.
AI CERTs' entry prompting credential, formerly Prompt Engineer Level 1: the seven AC-130 domains, the 50-question exam and yearly recertification.
AI CERTs' developer prompting credential, formerly Prompt Engineer Level 2: the seven AC-1302 domains, the exam, yearly renewal and who it fits.
AI CERTs' AI-assisted ethical hacking credential: the twelve AT-220 domains, the 50-question exam, yearly recertification and how it compares to PenTest+ and COASP.
The twelve AT-2101 modules and weights, 50 questions in 90 minutes, the $195 exam fee, the yearly re-exam and what AI CERTs says about ANAB.
Formerly AI+ Security Level 2: the 12 blueprint modules, the 50-question AT-2102 exam, the yearly renewal by exam and the AI security roles it fits.
Formerly AI+ Security Level 3: the twelve AT-2103 domains, the 50-question online exam, the $195 fee, yearly renewal and who it fits.
The ten EX200 objective groups, the hands-on RHEL 10 exam, the May 2026 framework change and both routes to RHCE.
The two tested sections and eight objectives of the vSphere Foundation 9.0 exam, 60 items in 135 minutes, the three-year validity, and what happened to the vSphere 8 VCP-DCV.
The eight Terraform Associate (004) objectives, the one-hour online exam, the $70.50 fee and the infrastructure roles it fits.
The 12 Security Guidance v5 domains, the open-book online exam, why it never expires and how it leads into CCSP.
The four risk-weighted exam domains and 25 lab modules, the 100-question Ramsys exam, both eligibility routes and Rocheston's ANAB and DoD 8140 claims.
Guides are added as we build them. For study help beyond the guides, try the free practice tests, the flashcards and the cybersecurity glossary.
Ten minutes tells you what the exam covers, how it is weighted, what it costs and whether you meet the experience rules. That is usually enough to know if the certification is the right one.
Where we have one, the guide links to a free 50-question test timed to the real exam. The domain breakdown in your score shows which of the domains you just read about need the work.
If the gap is small, self-study may be enough. If it is not, or you need the credential by a date, the boot camp linked from every guide covers the same domains in a compressed live format.
Most people pick a certification on a name they have heard, then find out what the exam actually expects a few weeks into studying.
The domains are the syllabus. Every vendor publishes an outline with weights, and the exam follows it closely. Knowing that one domain is a third of the exam and another is a tenth changes how you spend your study time.
The rules decide if you qualify. CISSP wants five years of experience, CCSK wants none, and CISM will accept some other certifications in place of two years. The guide spells out the rules so you do not book an exam you cannot yet be awarded.
Versions change. Security+ moves to SY0-801 in November, CISM changes its outline the same month, and CCSP rebalanced its domains in August. Each guide says which version it describes and what is coming.
The guide shows you the exam. Our accelerated boot camps teach it, with expert instructors, full-length practice exams, your exam voucher, and a free exam retake if you need one.
What people ask before they pick a certification.
Each guide covers one certification end to end: what the credential is and who issues it, every exam domain with its weight, the exam format and cost, the experience and renewal rules, and the jobs people actually hold with it. Where a vendor has announced a change, such as the Security+ SY0-801 release or the CISM outline change in November 2026, the guide says what is changing and when.
Yes. Each guide is written to the current published exam outline and is updated when the vendor changes it. The guides carry the exam code or version they describe, so you can check it against the version you are registered for.
It depends on where you are. With no security experience, ISC2 Certified in Cybersecurity or CompTIA Security+ are the usual starting points, and A+ or Network+ if you are new to IT altogether. With a few years in the field, CISSP, CISM or CISA are the credentials employers ask for by name. Each guide explains the experience rules so you can see which exams you already qualify for.
For 22 of them, yes. Every guide that has a matching free practice test links to it, and the full list is on the practice tests page. Each test is 50 questions, timed to the pace of the real exam, with an explanation for every answer.
No. The guides are written by Training Camp from each vendor's published exam outline and candidate information. They are not vendor documents and are not a substitute for the official exam outline, which every guide links to. Training Camp is an authorized training partner for many of the vendors listed, and says so on the guide where that applies.
The guide tells you what the exam expects. The boot camp teaches it, in a compressed live format with the exam voucher included and a free retake if you need one. Every guide links to the matching boot camp, and the boot camp page shows dates and pricing.
Tell us where you are in your career and what you are aiming for, and we will point you at the right credential and the fastest way to earn it.