Start free

Home › Exams › CISSP

CISSP hands-on labs — Certified Information Systems Security Professional

CISSP is the exam for Certified Information Systems Security Professional. 71 hands-on labs are mapped to it by the lab vendor or a StationX roadmap — about 70 hours of hands-on practice in total. Each runs in your browser, with nothing to install. 41 come with StationX Membership ($299/year) and 30 need StationX Infrastructure Labs ($149/year).

ISC2's new CISSP exam outline applies from 15 April 2027 — check which one you will sit.

71 labsabout 70 hoursStationX Membership · $299 / year · 41 labsStationX Infrastructure Labs · $149 / year · 30 labs

Access

StationX Membership — unlimited attempts

🔒 StationX Membership — $299 / year ($24.92/mo billed annually)

Already have access? Sign in.

StationX Infrastructure Labs — 3 attempts per lab

🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab

Already have access? Sign in.

CISSP at a glance

Exam code
CISSP
Certification
Certified Information Systems Security Professional
Vendor
ISC2
Labs
30 in StationX Infrastructure Labs · 41 in StationX Membership
How the labs are mapped
71 from the StationX roadmap
Practice time
About 70 hours, every lab states a duration
Lab levels
Guided 21 · Advanced 7 · Expert 2 · not stated 41

The 71 CISSP labs

  1. Applying Filters to TCPDump and Wireshark1 h
  2. Auditing Service Accounts and Setting Up Automated Log Collection2 h
  3. BitLocker Setup1 h
  4. Can You Configure Standard Linux and Windows Permissions?1 h 30 minAdvanced
  5. Can You Deploy a Certificate Authority and Issue Certificates?1 h 30 minAdvanced
  6. Can You Manage Access in Linux and Windows?2 hExpert
  7. Can You Manage Password Requirements in Windows and Linux?1 h 30 minAdvanced
  8. Can You Manage Users and Groups in Windows and Linux?1 h 30 minAdvanced
  9. Can You Secure a Website with an SSL/TLS Certificate?45 minAdvanced
  10. Can You Secure DNS Resource Records and Windows NTFS Volume File Objects?45 minAdvanced
  11. Can You Use PKI to Secure a Network Environment?2 hExpert
  12. Centralized Monitoring1 h
  13. CIRP Creation and Disaster2 h
  14. Comparing Controls1 h
  15. Configure Custom Certificate Templates and Deployment Options30 minGuided
  16. Configure Password Management in Linux30 minGuided
  17. Configure Password Management in Windows1 h 15 minGuided
  18. Configure Standard Linux Permissions30 minGuided
  19. Configure Standard Windows Permissions1 h 15 minGuided
  20. Creation of Standard Operating Procedures for Recovery1 h
  21. Data Backup to Prep for Recovery1 h
  22. Data Downloads and Validation1 h
  23. Deploy a Private Certificate Authority1 h 15 minGuided
  24. DNS as a Remote Shell1 h
  25. Enable Client SSL/TLS30 minGuided
  26. Enable DNSSEC30 minGuided
  27. Enable SSL/TLS on a Website30 minGuided
  28. Firewall Setup and Configuration1 h
  29. Force Point: DLP Email Overview1 h
  30. Force Point: DLP Network Overview1 h
  31. Gap Analysis of Firewall Rules2 h
  32. Identifying Key Assets1 h
  33. Implementing Least-Privilege on Windows1 h
  34. Leveraging Internal Intelligence Resources1 h
  35. Log Correlation & Analysis to Identify Potential IOC1 h
  36. Manage Users and Groups in Linux30 minGuided
  37. Manage Users and Groups in Windows30 minGuided
  38. Manually Request a PKI Certificate1 h 15 minGuided
  39. Monitoring and Verifying Management Systems1 h
  40. Network Segmentation (FW/DMZ/WAN/LAN)1 h
  41. Open and Close Ports on Windows 71 h
  42. Phishing1 h
  43. Post Incident Service Restoration1 h
  44. Ransomware1 h
  45. Recover from SQL Injection Attack1 h
  46. Secure Coding (Java) - Lab 1: Race Conditions1 h
  47. Secure Coding (Java) - Lab 2: Data Validation1 h
  48. Secure Coding (Java) - Lab 3: Authentication1 h
  49. Secure Coding (Java) - Lab 4: Access Control1 h
  50. Secure Coding (Java) - Lab 5: Cryptography1 h
  51. Secure Coding (Java) - Lab 6: Error Handling1 h
  52. Secure Coding (Java) - Lab 7: Static Analysis1 h
  53. Secure Coding (Java) - Lab 8: Insecure Deserialization1 h
  54. Sensitive Information Identification1 h
  55. Setting Up Zones in a Firewall1 h
  56. Snorby Setup and Operation1 h
  57. TCPDump1 h
  58. Tweaking Firewall Rules for Detection1 h
  59. Use EFS To Encrypt Files on NTFS Volumes30 minGuided
  60. Use Greenbone Security Manager to Identify Vulnerabilities30 minGuided
  61. Use hping for Enumeration30 minGuided
  62. Use Nmap for Enumeration30 minGuided
  63. Use Responder for Enumeration30 minGuided
  64. Use the Arachni Web Application Scanner30 minGuided
  65. Use the Nikto Web Application Scanner30 minGuided
  66. Use Web Application Scanners45 minAdvanced
  67. Using Snort and Wireshark to Analyze Traffic1 h
  68. Using the Burp Suite Web Application Scanner30 minGuided
  69. Using the OWASP Zed Attack Proxy Web Application Scanner45 minGuided
  70. Vulnerability Identification and Remediation1 h
  71. Wireshark1 h

Roadmaps for CISSP