CISSP Cyber Training Podcast - CISSP Training Program · Shon Gerber, vCISO, CISSP, Cybersecurity Consultant and Entrepreneur

CCT 322: From Firewalls To AI: Building A Smarter Defense - CISSP Domain 7.7

·36 min·3 clips

Your old firewalls? The Chinese and Russians already own them.

Sean Gerber starts by talking about unsupported edge devices and why organizations need to replace or remove them from the environment. He treats that as a real security problem, not just a compliance footnote. From there, he pivots into Domain 7.7 and the practical work of operating and maintaining detective and preventive measures. The tone stays steady and instructional. He keeps pointing out that exam questions often hide the real target behind controls that sound similar. He calls out the difference between air-gapped networks, Purdue model thinking, and internal segmentation firewalls. He also pushes the listener to slow down and read the wording word by word before answering. That comes up more than once. He then turns to intrusion detection systems and intrusion prevention systems. IDS is presented as near-real-time monitoring that can detect denial-of-service and distributed denial-of-service activity and alert on suspicious traffic. IPS is the stronger version that stops the incident instead of only reporting it. He explains that some next-generation firewalls can have these functions built in. He also notes that IPS functions can sometimes be disabled so the system behaves like an IDS. He treats that distinction as testable. Sean keeps translating the technical pieces into exam judgment. He wants the listener to think about what the question is actually asking before choosing a control. He repeats that the point is not to rush. He repeats that you should work through the question and make a decision only after you have the facts. The episode closes in the same practical teaching register that runs through the whole show. It leans into CISSP prep, control selection, and the habit of reading defensively and carefully.

As heard by us

A practical CISSP defense review that turns security controls into exam-ready judgment.

Sean Gerber stays in teacher mode, moving from discontinued edge devices to IDS and IPS before circling back to how exam wording can trip people up if they rush.

Read the full review in PlayNext →

Why you'd press play

You want a clearer read on IDS, IPS, and segmentation, with the wording slowed down so the right control stands out.

Read the full recommendation in PlayNext →

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from CISSP Cyber Training Podcast - CISSP Training Program