CISSP Cyber Training Podcast - CISSP Training Program · Shon Gerber, vCISO, CISSP, Cybersecurity Consultant and Entrepreneur

CCT 337: Indian CCTV and CISSP Question Deep Dive (Domain 3)

·21 min·1 clip

No read up and no write down identifies the Bell-Laputa confidentiality model.

1. CISSP Cyber Training Podcast with Sean Gerber centers this episode on Domain 3 CISSP questions and an Indian CCTV espionage article. 2. Sean Gerber is the host and CISSP trainer, and he frames the episode as exam preparation plus practical cybersecurity awareness. 3. The episode asks what security lessons come from covert cameras in India and from a set of multiple-choice CISSP questions. 4. Sean Gerber describes an Indian government probe involving CCTV espionage linked to Pakistan and says cameras were found near sensitive infrastructure. 5. He says the reported cameras were placed at railway stations and other critical locations, with footage sent to handlers in Pakistan. 6. He mentions a solar-unit, SIM-enabled camera positioned for wide views of infrastructure and troop movement. 7. Sean Gerber says the real-world lesson is to check whether cameras exist in your own organization without approval. 8. He connects that lesson to manufacturing space, intellectual property theft, and countries where surveillance risk is higher. 9. He says he has seen non-nefarious but disruptive cases as a CISO where hotspots and cameras were placed in unexpected locations. 10. He recommends using the article in interviews when asked how to protect intellectual property and company data secrets. 11. On the first CISSP question, he rejects a move from multiple layers to one appliance because it creates a single point of failure. 12. He says defense in depth depends on multiple independent layers and that leadership must accept any risk reduction tradeoff. 13. On the access-control question, he identifies Bell-LaPadula as the confidentiality model tied to no read up and no write down. 14. He contrasts Bell-LaPadula with Biba, which he says is the inverse and focuses on integrity. 15. He also distinguishes Clark-Wilson as a well-formed transaction model and Brewer-Nash as the Chinese wall model. 16. On the TCB question, he says the security kernel is the physical realization of the reference monitor concept. 17. He explains that the reference monitor must be tamper-proof, always invoked, and small enough to verify. 18. The tone is instructional and answer-driven, with Sean Gerber reading each option and eliminating wrong answers aloud. 19. CISSP candidates studying Domain 3 and access-control models will get the most value. 20. Listeners wanting a narrative story or deep technical debate may skip it.

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from CISSP Cyber Training Podcast - CISSP Training Program