ISC SSCP日本語 試験概要:
| 認定ベンダー: | (ISC)² |
| 試験名: | システムセキュリティ認定プロフェッショナル |
| 試験番号: | SSCP |
| 試験時間: | 180 minutes |
| 対応言語: | 英語, 日本語, 韓国語, 中国語(簡体字) |
| 合格点: | 1000点満点中700点 |
| 出題数: | 125 |
| 受験料: | $250 USD |
| 試験形式: | 多肢選択式, 高度な革新的出題項目 |
| 関連資格: | CISSP CCSP |
| 認定の有効期間: | 3 years (更新にはCPE creditsが必要) |
| サンプル問題: | ISC SSCP日本語 サンプル問題 |
| 受験方法: | Pearson VUE 試験会場(会場/オンライン監督付き受験あり) |
| 前提条件: | 受験者は、SSCP CBK の7つのドメインのうち1つ以上において、通算1年の実務経験を有していなければなりません。必要な経験を満たしていない候補者でも受験は可能ですが、認定は経験要件を満たした後にのみ付与されます。 |
| 公式シラバスのURL: | https://www.isc2.org/certifications/sscp |
ISC SSCP日本語 認定試験の出題範囲:
| トピック | 出題範囲 |
|---|
| トピック 1 | - Risk Identification, Monitoring and Analysis: This domain addresses how organizations identify, assess, and respond to risks through frameworks, vulnerability management, continuous monitoring, and security event analysis using tools like SIEM.
|
| トピック 2 | - Access Controls: This domain focuses on authentication methods, identity and access management lifecycles, trust architectures between networks, and the various models used to control who can access what resources.
|
| トピック 3 | - Incident Response and Recovery: This domain covers the full lifecycle of handling security incidents — from preparation and detection through containment, recovery, and post-incident review along with forensic investigation and business continuity planning.
|
| トピック 4 | - Systems and Application Security: This domain addresses the identification and mitigation of malicious code and activity, endpoint and mobile device security, cloud and virtual environment security, and the shared responsibility model in cloud deployments.
|
| トピック 5 | - Cryptography: This domain explains why and how cryptography is used to protect data confidentiality, integrity, and authenticity, covering encryption algorithms, secure protocols, hashing, digital signatures, and public key infrastructure.
|
| トピック 6 | - Network and Communications Security: This domain covers core networking concepts, common network attacks and countermeasures, access control standards, secure configuration of network devices and appliances, and securing wireless and IoT communications.
|
参照:https://www.isc2.org/certifications/sscp/sscp-certification-exam-outline#Domain%201:%20Security%20Concepts%20and%20Practices