ATP 108 study guide
ATP 108 · Work through your exam, one topic at a time.
ATP 108 is a professional certification exam for practitioners who need to demonstrate working command of a defined body of technical and procedural knowledge. Its six published domains span foundational concepts and terminology, core principles and frameworks, methods and procedures, tools and technology, regulations and standards, and professional practice and ethics. The ATP 108 study guide has 6 sections and about 1,824 words.
01Foundational Concepts and Terminology
Every later domain assumes you can distinguish a concept from a control from a procedure . A concept is an idea (e.g., least privilege); a control is an implemented safeguard (e.g., role-based access rules); a procedure is the documented steps someone follows.
337 words, about 2 min02Core Principles and Frameworks
Candidates should be able to explain least privilege , separation of duties , defense in depth , fail-safe defaults , need to know , and least functionality . These are design principles, not products, and questions test whether you can apply them to a scenario rather than recite them.
325 words, about 2 min03Methods and Procedures
This domain tests whether you can sequence work correctly. Know the shape of a risk assessment (identify, analyze, evaluate, treat, monitor), an incident response lifecycle (prepare, detect and analyze, contain, eradicate, recover, learn), and a change management flow (request, assess, approve, implement, verify, record).
277 words, about 1 min04Tools and Technology
Questions test what a class of tool does , where it sits, and what it cannot see. Be comfortable with the roles of firewalls , intrusion detection and prevention systems , endpoint protection , vulnerability scanners , log aggregation and monitoring , backup and recovery tooling , and identity providers .
294 words, about 1 min05Regulations, Standards, and Compliance
This domain asks whether you understand that compliance means demonstrating adherence to obligations through documented controls, testing, and records - not merely asserting it. Know the difference between a regulation (legally enforceable), a standard (a defined, often mandatory requirement), and a framework (a structured approach used to meet obligations).
283 words, about 1 min06Professional Practice and Ethics
Ethics questions test judgment, not trivia. Core commitments include integrity (accuracy and honesty in reporting), confidentiality (protecting information you are entrusted with), due care (competence and diligence), objectivity (avoiding conflicts of interest), and transparency (documenting decisions and their rationale).
308 words, about 2 min