CISSP Cyber Training Podcast - CISSP Training Program · Shon Gerber, vCISO, CISSP, Cybersecurity Consultant and Entrepreneur

CCT 310: Wi-Fi Hopping And Database Defense - CISSP Training

·44 min·2 clips

Client-side attacks include phishing, malware, man-in-the-middle attacks, drive-by downloads, and browser exploits.

Domain 3.5 comes up fast. Sean opens with the CISSP Cyber Training promise, then moves into mitigating vulnerabilities in security architectures. He calls the topic gnarly, which fits. This is a lot of ground for one short lesson, and he does not pretend otherwise. The lesson settles on databases. Replication is the first practical control: copy data across sites so availability and reliability have something real behind them. Then comes testing. A disaster recovery plan is just paperwork until the team has exercised it and proved the data can be reconstituted after a failure. Transparency gets a security angle too. Users do not need to know where a distributed database lives. Keeping that location detail out of casual reach reduces unnecessary exposure. The sharper warning is access. Sean spends time on database administrator accounts because those accounts sit close to the sensitive data and can do real damage. Watch privileged accounts closely, and watch broader activity when needed. Consistency and integrity round it out. Distributed data still has to stay accurate through updates, failures, and recovery work. Network security matters as well: data moving between databases needs encryption and secure communication protocols. Sean closes by tying CISSP Cyber Training funds to The Shepherd's Hope and adoptive families, then points listeners back to the larger Section 3.5 material.

As heard by us

A practical CISSP refresher that turns security-architecture risks into day-to-day judgment.

This episode treats CISSP Domain 3.5 as a practical guide to reducing risk in security architectures. Sean Gerber moves through replication, disaster recovery, transparency, database-admin risk, consistency and integrity, network security, encryption, secure communication…

Read the full review in PlayNext →

Why you'd press play

Need a clear CISSP refresher on database risk?

Read the full recommendation in PlayNext →

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from CISSP Cyber Training Podcast - CISSP Training Program