CCISO vs CISSP (Top Security Certifications)

CCISO vs CISSP

Certified Chief Information Security Officer- CCISO
EC-Council’s CCISO Program has certified leading information security professionals around the world. A core group of high-level information security executives, the CCISO Advisory Board, contributed by forming the foundation of the program and outlining the content that would be covered by the exam, body of knowledge, and training. Some members of the Board contributed as authors, others as exam writers, others as quality assurance checks, and still others as trainers. Each segment of the program was developed with the aspiring CISO in mind and looks to transfer the knowledge of seasoned professionals to the next generation in the areas that are most critical in the development and maintenance of a successful information security program.

The Certified CISO (CCISO) program is the first of its kind training and certification program aimed at producing top-level information security executives. The CCISO does not focus solely on technical knowledge but on the application of information security management principles from an executive management point of view. The program was developed by sitting CISOs for current and aspiring CISOs.

CISSP: A business-focused IT security certification 

The CISSP (Certified Information Systems Security Professional) certification, governed by the International Information System Security Certification Consortium, is globally recognised.

IT security consultant and managing director of ThreatDefence Zlatko Hristov says, “The CISSP is a very broad certification, and involves a challenging exam. In job descriptions, the CISSP is almost everywhere. If you apply for any IT security job that has management responsibilities, then this certification is a must.”

Cyber-security consultant and IT blogger Karissa A. Breen comments, “The CISSP certification is indicative of someone who is looking to step up in their career. The certification requires a comprehensive level of understanding towards the industry.”

The reason the CISSP is so valuable on a CV stems from the nature of the business environment. According to Hristov, “One of the biggest challenges in IT security is obtaining business endorsement and sign-off on proposed security strategies and measures. A candidate with CISSP will be able to achieve this more easily because it’s a very business-focused certification, giving them the skills to move away from just technical language.”

CEH Exam Questions (December 2017)

CEH (Latest Exam Questions)

For Full List Email us at moonintdubai@gmail.com

1.         It has been reported to you that someone has caused an information spillage on their computer. You go to the computer, disconnect it from the network, remove the keyboard and mouse, and power it down. What step in incident handling did you just complete?

A.    Discovery

B.     Recovery

C.     Containment

D.    Eradication

C

Internet Protocol Security IPSec is actually a suite of protocols. Each protocol within the suite provides different functionality. Collective IPSec does everything except.

A.    Authenticate

B.     Protect the payload and the headers

C.     Work at the Data Link Layer

D.    Encrypt

C

Which Intrusion Detection System is best applicable for large environments where critical assets on the network need extra scrutiny and is ideal for observing sensitive network segments?

A.    Network-based intrusion detection system (NIDS)

B.     Honeypots

C.     Host-based intrusion detection system (HIDS)

D.    Firewalls

A

When you are testing a web application, it is very useful to employ a proxy tool to save every request and response. You can manually test every request and analyze the response to find vulnerabilities. You can test parameter and headers manually to get more precise results than if using web vulnerability scanners.

What proxy tool will help you find web vulnerabilities?

A.    Dimitry

B.     Burpsuite

C.     Maskgen

D.    Proxychains

B

Which one of the following Google advanced search operators allows an attacker to restrict the results to those websites in the given domain?

A.    [link:]

B.     [site:]

C.     [cache:]

D.    [inurl:]

B

Canada Immigration: More Candidates Will be Invited in Year 2018

Canada Immigration: More Candidates Will be Invited in Year 2018

Canada will invite more number of Migrants in year 2018. Below is a report published officially:

With higher targets set for Canada’s economic immigration categories for 2018, IRCC will have to perform either larger or more frequent draws from Express Entry pool in the new year, or both. Each of those scenarios could have the effect of lowering the cut-off CRS score.

For the most part, CRS cut-off scores in 2017 have varied from the low 400s to high 450s, with scores in the 430s occurring most often. This is already a big improvement over 2016, which was characterized by draws with low ITAs and high CRS cut-off scores. The lowest CRS score in 2016 was 453. With more ITAs expected to be issued in 2018 than 2017, it is hoped the CRS scores will continue to drop even further.

A few exceptional 2017 draws are also worth noting, namely the May 26 and Nov. 1 draws that targeted candidates with provincial nominations and the Federal Skilled Trades Class (FSTC). Those draws saw scores both peak as high as 775 points for provincial nominees, who receive an extra 600 CRS points, and plummet as low as 199 for FSTC candidates, who are able to get into the Express Entry pool with lower language scores than candidates in the Federal Skilled Worker Class or the Canadian Experience Class.

Program-specific draws have had the noticeable effect of reducing the cut-off CRS score significantly, as seen with the FSTC-specific Express Entry draws. To date, however, there has not been a program-specific draw for candidates in the Federal Skilled Worker Class and it is therefore unknown what a cut-off for such a draw might look like.

“November has followed the trends of a dynamic 2017 for Canada’s Express Entry system,” said Attorney David Cohen. “There’s reason to believe that 2018 will prove even more interesting, and rewarding, for candidates in the Express Entry pool.”

Canada Immigration: Manitoba State Nomination 2018

Manitoba has announced a number of changes to its Provincial Nominee Program, including the creation of an in-demand occupations list and a new pathway aligned with Canada’s Express Entry system.

The measures are part of a broad restructuring and renewal of the Manitoba Provincial Nominee Program (MPNP) to provide newcomers with new pathways to permanent residence in the province. The changes include the restructuring of three existing immigration streams —MPNP-B business immigration stream, Skilled Worker in Manitoba Stream and Skilled Worker Overseas Stream — and the creation of a new International Education Stream.

One of the key changes is the introduction of a new in-demand occupations list that will be used to prioritize Expressions of Interest (EOI) for inviting applications from the new Skilled Worker Overseas stream. That stream will now be subdivided into two pathways — the Manitoba Express Entry Pathway and the Human Capital Pathway.

The Express Entry Pathway, which is due to come into effect in January 2018, will allow Manitoba to nominate qualified applicants who meet the criteria for Canada’s Express Entry system and have an active Express Entry profile. Among other criteria, priority will be given to candidates who have a minimum of six-months experience in an in-demand occupation as well as a close friend or relative in Manitoba or a valid Invitation to Apply issued by the MPNP.

The Human Capital Pathway is for international skilled worker applicants with skills and training covered by the In-demand Occupations list, and who demonstrate a high potential for establishing themselves in their chosen occupations sooner after arrival in Manitoba. Family connections or previous post-secondary or work experience in Manitoba in the last five years are required to qualify for this stream, among other criteria. 

Changes to MPNP-B and Skilled Workers in Manitoba

The MPNP-B stream has been renamed the Business Investor Stream (BIS), effective immediately, and it has been sub-divided into the Entrepreneur Pathway and the Farm Investor Pathway.

A government news release said the BIS will prioritize applicants who start a business within the first 12 months of their arrival in Manitoba, especially those who want to establish their business outside Winnipeg. Applicants in the Entrepreneur Pathway would receive a temporary work permit and rather than provide a good-faith deposit of $100,000, they would sign a business performance agreement to purchase an existing business in the province or start a new one. The province says the new criteria is scheduled to come into effect in the first quarter of 2018.

The new Skilled Workers in Manitoba Stream will also be subdivided into two pathways: the Manitoba Work Experience Pathway and Employer Direct Recruitment Pathway.

The Manitoba Work Experience Pathway is for applicants currently working in Manitoba with temporary work permits and whose jobs are not found on the In-demand Occupations list. The Employer Direct Recruitment Pathway is for international applicants with job offers from pre-approved Manitoba employers.

International Education Stream

Finally, the new International Education Stream is designed to provide “faster pathways to provincial nomination” for international students graduating in Manitoba and whose skills meet the needs of the province’s employers.

Effective in April 2018, the new stream will target graduates in science, technology, engineering and mathematics programs who are completing internships “that support industry innovation” in their fields of study. Under the new stream, Manitoba’s provincial government says international student graduates from Manitoba institutions who have found a long-term job in an in-demand occupation will no longer have to work for six months before applying for the MPNP.

“The new International Education Stream will make it easier for international students with a Manitoba education to build their careers and settle here in the province,” said Manitoba’s Education and Training Minister, Ian Wishart.

Canada Immigration Points Down to 439

Canada Immigration Points Down to 439

Immigration, Refugees and Citizenship Canada has invited 2,750 candidates in the Express Entry pool to apply for Canadian permanent residence in a draw that took place on Nov. 15. The Comprehensive Ranking System (CRS) score of the lowest-ranked candidate issued an Invitation to Apply (ITA) was 439.

All candidates with a score above 439 were invited to apply. While some candidates with a score of 439 received ITAs, IRCC said a tie-break procedure was necessary, meaning only those candidates with a CRS score of 439 who entered their profiles in the Express Entry pool prior to a specified date and time were invited to apply. In this case, that time and date was October 19, 2017, at 12:02:28 UTC.

Today’s cut-off CRS score of 439 is 19 points lower than last week’s draw, which had a cut-off score of 458.

It is interesting to note that this latest draw was the fourth in three weeks, which has only happened once before since Express Entry was introduced. Canada announced new three-year immigration targets on Nov. 1  and more frequent draws could have the effect of increasing the number of ITAs issued and lowering the CRS cut-off score as candidates with higher scores are removed from the pool.

Under its recently announced Immigration Levels Plan, Canada is planning to welcome nearly one million new permanent residents between 2018 and 2020. Nearly 250,000 of those newcomers to be admitted through programs managed under the Express Entry system, namely: the Federal Skilled Worker Class (FSWC), the Federal Skilled Trades Class (FSTC), and the Canadian Experience Class (CEC). The number admitted through these programs is set to increase year-on-year.

This latest draw was the 78th draw to take place since the Express Entry system was introduced on Jan. 1, 2015, and the 28th since the start of 2017.  So far this year, 80,523 ITAs have been issued.

With fluctuating CRS thresholds, it is helpful to look at which sorts of candidates are receiving ITAs following the latest draw. The following examples below are entirely hypothetical.

Mary is 36, has a Master’s degree and recently wrote her IELTS and obtained a score of 8 in each category (reading, speaking, writing and listening). She has been working as a university professor for 4 years. Her CRS of 440 would have been sufficient to obtain and ITA during the most recent draw from the Express Entry pool.

José is 32 has been working in Canada as a retail manager for 2 years. He studied commerce in Canada and obtained a bachelor’s degree. Jose has an intermediate English language proficiency. Before coming to Canada to study, Jose worked as a retail manager overseas for two years. His CRS of 441.

Rupa is a 29 year old who has been working as a computer programmer for five years.  She has a bachelor’s degree and an advanced English language proficiency. Rupa has never worked or studied in Canada. Her CRS of 441 would have been sufficient to obtain an ITA during the most recent Express Entry draw.

“This latest draw is a good sign for the coming year,” said Attorney David Cohen. “More frequent draws from the Express Entry pool and a greater number of ITAs could have the effect of lowering the minimum CRS score required. As Canada strives to achieve a higher target, we’re hoping more ITAs being issued continues into 2018.”

What is Risk and Risk Management?

What is risk?

Risk is defined as ‘an uncertain event or set of events that, should it occur, will have an effect on the achievement of objectives. A risk is measured by the combination of the probability of a perceived threat or opportunity occurring and the magnitude of its impact on objectives.’ All organizations, including temporary ones such as those concerned with programmes or projects, will encounter uncertain events when trying to achieve their objectives. These uncertain events may arise inside or outside the organization. Each individual uncertain event that would impact one or more objectives is known as a risk. Within this definition, ‘threat’ is used to describe an uncertain event that would have a negative impact on objectives if it occurred and ‘opportunity’ is used to describe an uncertain event  that would have a positive impact on objectives if it occurred. The combined effect of risks to a set of objectives is known as risk exposure, and is the extent of the risk borne by that part of the organization at that time.

What is risk management?

Every organization manages its risk in some way, but not always in a way that is visible, repeatable or consistent, to support effective decision-making. The task of risk management is to ensure that an organization makes cost-effective use of a risk management process that includes a series of  well defined steps. The aim is to improve internal control and support better decision-making through a good understanding of individual risks and the overall risk exposure that exists at a particular time.

Accordingly, in this guide, the term ‘risk management’ refers to the systematic application of principles, an approach and a process to the tasks of identifying and assessing risks, and then planning and implementing risk responses. This provides a disciplined environment for proactive decision-making.

For risk management to be effective, risks need to be:

■■ Identified This involves considering uncertainties that would affect the achievement of objectives within the context of a particular organizational activity and then describing them to ensure that there is a common understanding.

■■ Assessed This involves estimating the probability, impact and proximity of individual risks so they can be prioritized, and understanding the overall level of risk (risk exposure) associated with the organizational activity.

■■ Controlled This involves planning appropriate responses to risks, assigning owners and
actionees and then implementing, monitoring and controlling these responses.

Why is risk management important?

Some risk-taking is inevitable if an organization is to achieve its objectives. Those organizations that are more risk aware appreciate that actively managing not only potential problems (threats) but also potential opportunities provides them with a competitive advantage. Taking and managing risk is the very essence of business survival and growth. Effective risk management is likely to improve performance against objectives by contributing to:

■■ Fewer sudden shocks and unwelcome surprises
■■ More efficient use of resources
■■ Reduced waste
■■ Reduced fraud
■■ Better service delivery
■■ Reduction in management time spent fire-fighting
■■ Better management of contingent and maintenance activities
■■ Lower cost of capital
■■ Improved innovation
■■ Increased likelihood of change initiatives being achieved
■■ More focus internally on doing the right things properly
■■ More focus externally to shape effective strategies.

Many of these benefits are applicable to both the private and public sectors. Whereas the private sector focuses mainly on shareholder returns and the preservation of shareholder value, the public sector’s role is to perform cost-effectively, in accordance with government legislation and policies.

What is CND Certification?

What is CND Certification?

Certified Network Defender (CND) is a vendor-neutral, hands-on, instructor-led comprehensive network security certification training program. It is a skills-based, lab intensive program based on a job-task analysis and cybersecurity education framework presented by the National Initiative of Cybersecurity Education (NICE). The course has also been mapped to global job roles and responsibilities and the Department of Defense (DoD) job roles for system/network administrators. The course is designed and developed after extensive market research and surveys.

The program prepares network administrators on network security technologies and operations to attain Defense-in-Depth network security preparedness. It covers the protect, detect and respond approach to network security. The course contains hands-on labs, based on major network security tools and techniques which will provide network administrators real world expertise on current network security technologies and operations. The study-kit provides you with over 10 GB of network security best practices, assessments and protection tools. The kit also contains templates for various network policies and a large number of white papers for additional learning.

CND Course Outline

Module 01: Computer Network and Defense Fundamentals.

Module 02: Network Security Threats, Vulnerabilities, and Attacks.

Module 03: Network Security Controls, Protocols, and Devices.

Module 04: Network Security Policy Design and Implementation.

Module 05: Physical Security.

Module 06: Host Security.

Module 07: Secure Firewall Configuration and Management.

Module 08: Secure IDS Configuration and Management.

Module 09: Secure VPN Configuration and Management.

Module 10: Wireless Network Defense.

Module 11: Network Traffic Monitoring and Analysis.

Module 12: Network Risk and Vulnerability Management.

Module 13: Data Backup and Recovery.

Module 14: Network Incident Response and Management.

Who Is It For?

• Network Administrators
• Network security Administrators
• Network Security Engineer
• Network Defense Technicians
• CND Analyst
• Security Analyst
• Security Operator
• Anyone who involves in network operations

About the Exam

• Exam title: CND
• Exam code: 312-38
• Number of questions: 100
• Duration: 4 Hours
• Availability: ECC Exam
• Test Format: Interactive Multiple Choice Questions