To obtain the CISSP certification, candidates must pass an extensive exam that tests their knowledge in these domains. The exam covers both theoretical concepts and practical application of security principles. Candidates are required to have at least five years of cumulative, paid work experience in two or more of the domains to be eligible for the certification. However, candidates who do not meet the experience requirement can still earn an Associate of (ISC)² designation by passing the exam and gaining the necessary experience within a certain time frame.