NISP L1 PT study guide
NISP L1 PT · Work through your exam, one topic at a time.
NISP Level 1 Professional Training (commonly written NISP L1 PT, or NISP一级) is an entry-level information security credential aimed at people who are new to the field or who handle security as part of a broader role - IT support staff, helpdesk and operations personnel, junior administrators, and students preparing for a first security job. Its purpose is to show that a candidate understands everyday security concepts and can apply basic safeguards in ordinary work situations, rather than to certify specialist depth. The NISP L1 PT study guide has 8 sections and about 4,290 words.
01Information Security Fundamentals and Security Awareness
Domain 1 supplies the vocabulary every later domain assumes. NISP L1 questions here are definitional and scenario-based: name the property being violated, classify a threat, or choose the human control when no technical one exists.
515 words, about 3 min02Network Security Basics
Domain 2 tests how packets actually travel and where controls sit along the path. L1 items ask you to read a small topology, name the protocol or port behind a service, or pick the control that matches a stated risk.
498 words, about 2 min03Host and Endpoint Security
Domain 3 covers protecting the device itself: servers, laptops and workstations. L1 questions present an endpoint symptom or a hardening checklist and ask for the correct control or the correct next step.
437 words, about 2 min04Application and Data Security
Domain 4 covers building software that resists attack and protecting the data it handles. L1 items give a code snippet, a request pattern or a data-handling scenario and ask for the flaw or the correct control.
441 words, about 2 min05Identity, Authentication and Access Control
Domain 5 covers who a user is, how that is proven, and what they may then do. L1 questions present a login design, an access model or an account-lifecycle failure and ask for the flaw or the correct model.
443 words, about 2 min06Cryptography and PKI Fundamentals
Domain 6 covers the primitives that provide confidentiality, integrity and authenticity, and the certificate infrastructure that makes them usable at scale. L1 items ask you to choose the right algorithm or key, or to read a simple certificate scenario.
511 words, about 3 min07Security Operations
Domain 7 tests the day-to-day discipline that keeps controls working: inventories, baselines, change control, vulnerability and patch management, and recovery planning. L1 items are procedural - they describe an operational situation and ask for the correct process step or priority.
441 words, about 2 min08Security Operations, Monitoring and Incident Response
Domain 8 covers seeing an attack and handling it in the right order. L1 items give an alert, a log excerpt or the first minutes of an incident and ask what to do next or which evidence to collect first.
1,004 words, about 5 min