CISSP Cyber Training Podcast - CISSP Training Program · Shon Gerber, vCISO, CISSP, Cybersecurity Consultant and Entrepreneur

CCT 321: From BIOS Passwords To ABAC - Practice CISSP Questions

·22 min·1 clip

About 53% of organizations share BIOS passwords, and Sean says CyberArk could manage them better.

1. CISSP Cyber Training Podcast - CISSP Training Program centers this episode on CISSP domain five questions and a hardware-security article. 2. Sean Gerber hosts the show, and he frames the segment as exam prep tied to real-world security practice. 3. The episode asks what least privilege, RBAC, ABAC, SSO, MFA, IGA, and MAC look like on the CISSP exam. 4. Sean cites an InfoSec Security Magazine article saying about 80% of IT and security decision makers admit major gaps in hardware and firmware knowledge. 5. He links that gap to his A+ background and says hardware still matters even as organizations move toward SaaS. 6. Sean says 53% of organizations share BIOS passwords and suggests tools like CyberArk for safer password management. 7. He also says more than one in 10 employees are frustrated with the slow pace of maintenance and that many people now replace devices instead of fixing them. 8. The e-waste discussion covers repurposing equipment, avoiding landfills, and removing storage hardware before donation or disposal. 9. Sean names hard drives and SSDs as the items that should be removed when a computer is given away. 10. The first question defines privilege management as enforcing least privilege by controlling access to sensitive data. 11. The least-privilege question emphasizes access to only the information needed for specific tasks. 12. RBAC is described as access granted by the user's role within the organization rather than individual identity. 13. The MFA questions use smart card and PIN as two-factor authentication and biometrics as the most secure factor. 14. Identity federation is described as a single authentication system across different platforms and organizations. 15. SSO lets a user log in once and access multiple applications without authenticating again. 16. Sean says ABAC allows more granular access decisions using attributes, while MAC fits regulated environments like healthcare, government, and military. 17. The tone is instructional, conversational, and exam-oriented, with short explanations after each multiple-choice answer. 18. Sean mixes CISSP terminology with offhand examples about Christmas, TV repairs, and his wife's activities, which keeps the pace informal. 19. Security professionals preparing for CISSP domain five will get value from this episode. 20. Listeners wanting a deep narrative story should probably skip it.

As heard by us

A practical Domain 5 review that keeps the CISSP answer logic close at hand.

This CISSP Cyber Training episode turns Domain 5 into a compact review of access-control basics, beginning with a report that about three quarters of security leaders acknowledge gaps in hardware knowledge, then moving into exam-style questions.

Read the full review in PlayNext →

Why you'd press play

Want CISSP Domain 5 practice that moves from hardware-knowledge gaps into role-based access, smart cards, and federation?

Read the full recommendation in PlayNext →

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from CISSP Cyber Training Podcast - CISSP Training Program