CISSP hands-on labs — Certified Information Systems Security Professional
CISSP is the exam for Certified Information Systems Security Professional. 71 hands-on labs are mapped to it by the lab vendor or a StationX roadmap — about 70 hours of hands-on practice in total. Each runs in your browser, with nothing to install. 41 come with StationX Membership ($299/year) and 30 need StationX Infrastructure Labs ($149/year).
ISC2's new CISSP exam outline applies from 15 April 2027 — check which one you will sit.
71 labsabout 70 hoursStationX Membership · $299 / year · 41 labsStationX Infrastructure Labs · $149 / year · 30 labs
Access
StationX Membership — unlimited attempts
🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
Already have access? Sign in.
StationX Infrastructure Labs — 3 attempts per lab
🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab
Already have access? Sign in.
CISSP at a glance
- Exam code
- CISSP
- Certification
- Certified Information Systems Security Professional
- Vendor
- ISC2
- Labs
- 30 in StationX Infrastructure Labs · 41 in StationX Membership
- How the labs are mapped
- 71 from the StationX roadmap
- Practice time
- About 70 hours, every lab states a duration
- Lab levels
- Guided 21 · Advanced 7 · Expert 2 · not stated 41
The 71 CISSP labs
- Applying Filters to TCPDump and Wireshark
- Auditing Service Accounts and Setting Up Automated Log Collection
- BitLocker Setup
- Can You Configure Standard Linux and Windows Permissions?
- Can You Deploy a Certificate Authority and Issue Certificates?
- Can You Manage Access in Linux and Windows?
- Can You Manage Password Requirements in Windows and Linux?
- Can You Manage Users and Groups in Windows and Linux?
- Can You Secure a Website with an SSL/TLS Certificate?
- Can You Secure DNS Resource Records and Windows NTFS Volume File Objects?
- Can You Use PKI to Secure a Network Environment?
- Centralized Monitoring
- CIRP Creation and Disaster
- Comparing Controls
- Configure Custom Certificate Templates and Deployment Options
- Configure Password Management in Linux
- Configure Password Management in Windows
- Configure Standard Linux Permissions
- Configure Standard Windows Permissions
- Creation of Standard Operating Procedures for Recovery
- Data Backup to Prep for Recovery
- Data Downloads and Validation
- Deploy a Private Certificate Authority
- DNS as a Remote Shell
- Enable Client SSL/TLS
- Enable DNSSEC
- Enable SSL/TLS on a Website
- Firewall Setup and Configuration
- Force Point: DLP Email Overview
- Force Point: DLP Network Overview
- Gap Analysis of Firewall Rules
- Identifying Key Assets
- Implementing Least-Privilege on Windows
- Leveraging Internal Intelligence Resources
- Log Correlation & Analysis to Identify Potential IOC
- Manage Users and Groups in Linux
- Manage Users and Groups in Windows
- Manually Request a PKI Certificate
- Monitoring and Verifying Management Systems
- Network Segmentation (FW/DMZ/WAN/LAN)
- Open and Close Ports on Windows 7
- Phishing
- Post Incident Service Restoration
- Ransomware
- Recover from SQL Injection Attack
- Secure Coding (Java) - Lab 1: Race Conditions
- Secure Coding (Java) - Lab 2: Data Validation
- Secure Coding (Java) - Lab 3: Authentication
- Secure Coding (Java) - Lab 4: Access Control
- Secure Coding (Java) - Lab 5: Cryptography
- Secure Coding (Java) - Lab 6: Error Handling
- Secure Coding (Java) - Lab 7: Static Analysis
- Secure Coding (Java) - Lab 8: Insecure Deserialization
- Sensitive Information Identification
- Setting Up Zones in a Firewall
- Snorby Setup and Operation
- TCPDump
- Tweaking Firewall Rules for Detection
- Use EFS To Encrypt Files on NTFS Volumes
- Use Greenbone Security Manager to Identify Vulnerabilities
- Use hping for Enumeration
- Use Nmap for Enumeration
- Use Responder for Enumeration
- Use the Arachni Web Application Scanner
- Use the Nikto Web Application Scanner
- Use Web Application Scanners
- Using Snort and Wireshark to Analyze Traffic
- Using the Burp Suite Web Application Scanner
- Using the OWASP Zed Attack Proxy Web Application Scanner
- Vulnerability Identification and Remediation
- Wireshark
Roadmaps for CISSP
- CISSP — Certified Information Systems Security Professional — certification roadmap: courses, labs and practice tests in order
- Security Engineer — career roadmap; follows the CISSP — Certified Information Systems Security Professional roadmap
- Security Architect — career roadmap; follows the CISSP — Certified Information Systems Security Professional roadmap
- Cyber Security Manager — career roadmap; follows the CISSP — Certified Information Systems Security Professional roadmap
- AI Security Engineer — career roadmap; follows the CISSP — Certified Information Systems Security Professional roadmap




