topic Re: Help me assess my readiness for the CISSP exam in Exam Preparation

Help me assess my readiness for the CISSP exam

Vigenere — Tue, 14 Jan 2020 19:04:43 GMT

Dear ISC2 Community,

It's a pleasure to have joined you!

I am getting ready for my 2nd CISSP attempt, having failed the first about 9 months ago. My preparation back then included studying on the "Eleventh Hour CISSP®: Study Guide" and doing all questions on that book plus other questions found online. I took many notes while studying the book and I practically re-wrote it in a summarized format so I was pretty strong on the theoretical part but I admit I underestimated the difficulty of the exam and did too little practice. This is the reason why I failed although not in a terrible way, as I got "Below Proficiency" on 2 domains, "Near Proficiency" on 5 and "Above Proficiency" in 1.

After a bit of discouragement and a break, I committed to try again and I started doing a lot of practice tests. I have downloaded the "PocketPrep CISSP" app and bought a Premium Account. All the questions and answers are based on the study guide by Mike Chapple and they come with detailed explanations after the test is done. I have been practicing every day, multiple times a day for more than 3 months now and my scores are consistently above 70%.

The question which I am finding incredibly hard to answer is: am I ready?

I hoped you can help me answer this question by sharing your experience and particularly the moment when you said to yourself "I am ready, I got this!"

What other practice tests or preparation material can you recommend, that is compliant with ISC2 policies and is as similar as possible to the real exam?

A bit about myself: I have 9 years of IT experience, the last 5 and a half of which were a full immersion in security as I have been working in a Security Operations Center of a large organization, in several roles.

Educational background: B.S. in Computer Science

Other certs I hold/held: GCIA, CCNA

Thanks in advance for your help!

Re: Help me assess my readiness for the CISSP exam

AppDefects — Wed, 15 Jan 2020 02:54:36 GMT

@Vigenere wrote:
Dear ISC2 Community,

It's a pleasure to have joined you!
I am getting ready for my 2nd CISSP attempt, having failed the first about 9 months ago. My preparation back then included studying on the "Eleventh Hour CISSP®: Study Guide" and doing all questions on that book plus other questions found online. I took many notes while studying the book and I practically re-wrote it in a summarized format so I was pretty strong on the theoretical part but I admit I underestimated the difficulty of the exam and did too little practice. This is the reason why I failed although not in a terrible way, as I got "Below Proficiency" on 2 domains, "Near Proficiency" on 5 and "Above Proficiency" in 1.

After a bit of discouragement and a break, I committed to try again and I started doing a lot of practice tests. I have downloaded the "PocketPrep CISSP" app and bought a Premium Account. All the questions and answers are based on the study guide by Mike Chapple and they come with detailed explanations after the test is done. I have been practicing every day, multiple times a day for more than 3 months now and my scores are consistently above 70%.

The question which I am finding incredibly hard to answer is: am I ready?
I hoped you can help me answer this question by sharing your experience and particularly the moment when you said to yourself "I am ready, I got this!"

What other practice tests or preparation material can you recommend, that is compliant with ISC2 policies and is as similar as possible to the real exam?

A bit about myself: I have 9 years of IT experience, the last 5 and a half of which were a full immersion in security as I have been working in a Security Operations Center of a large organization, in several roles.

Why spend the money on unofficial prep guides and apps? I hope that you have studied the official (ISC)2 CBK. That matters. Make sure that any material that you use that you can pin it to a task in a domain according to the exam blueprint.That matters. Study what you don't know. I wish you the best of luck!

Re: Help me assess my readiness for the CISSP exam

csjohnng — Wed, 15 Jan 2020 05:43:32 GMT

@Vigenere

it's difficult to access if you ready or not. I guess the most appropriate person to access is actually yourself.

I can only share my journey:

CISSP, CCSP, CISSP-ISSAP and recently CISSP-ISSMP.

I pass all the above in the 1st attempt.

All of them I used are ISC2 official study guide or CBK (even some like ISSAP is out-dated material), official flashcard, and some references like NIST. I have never paid for "non" official material, not mentioning "premium account" for ....

With all official material, it may not able to get you 100% full mark but I would say it should not be a problem to pass if you really understand the official material thoroughly.

And at the end, it's all about your knowledge, experience on specify domain and your ability to understand the question itself during the exam. If you take the question in a wrong way, your answers to the question will probably be wrong which definitely decrease your likelihood to PASS.

For myself (just my opinion), if I find myself asking "am I ready?", then my only conclusion will be "I am not ready" - as a result, I focus on the areas/topic/domains that I am weak or less familiar, until I can say to myself I am good, good means I can explain to myself (and others) in a plain English why this is the right answer to the question and why the other are not the right answers (or not the best one), how the question need to be change (or ask) for not best answers in order to be the best answer.

And when I stop asking myself "am I ready", then I think I am ready. But of course, it does not always imply (or guarantee) a PASS.

Last but not least, good luck.

Re: Help me assess my readiness for the CISSP exam

Vigenere — Wed, 15 Jan 2020 10:29:07 GMT

@csjohnng @AppDefects thanks for your replies and wishes,

Personally, I know many people who have earned their CISSP by studying and practicing on "unofficial" material. The Eleventh Hour book was lent to me and the app has a relatively low cost, is very easy and pleasant to use and has a very detailed explanation of each answer. It also allows you to track your progress over time which I find really useful.

Is there anything similar in the set of things you would classify as "official"?

Re: Help me assess my readiness for the CISSP exam

Vigenere — Wed, 15 Jan 2020 10:55:01 GMT

@csjohnng @AppDefects I forgot to mention that the PocketPrep references the specific page where the answer is contained in the Official Study Guide (8th Edition). So it's an unofficial app that accurately references the Official guide.

Re: Help me assess my readiness for the CISSP exam

dippydog1932 — Wed, 15 Jan 2020 15:04:06 GMT

Having Provisionally passed in December here are my 2 cents.

This is unlike any other certification I have sat for. The questions were not black and white like I studied in multiple prep books and apps.

The advice I would suggest, as many others you will find, know the concepts not the granular specifics. This helped me in ruling out the 2 least right answer, then make sure you understand 'how' ISC2 would answer the question.

Having worked in Information, technical, and operational security for over 10 years the real world gets messy and so we make choices that are not the 'textbook correct' way for many reasons. To understand the test I had to pull myself back and understand the concepts.

Its all about the BEST answer from the scenarios. The added difficultly is when you have done at least 2 or 3 of the answers in the 'business world' for specific reasons it becomes easy to gravitate to the ones you know.

As far as study guides, I used the official CBK and the mobile app CISSP STUDY from ISC2. Both helped to understand the concepts, but in a black and white way. I also used the free study course on the website cybrary.it for the CISSP. Just as background and key takeaways.

It is a daunting test, but if you go in confident and really get the 'concepts' that you are studying then you have a good chance.

Be confident and look at the big concept picture for each question.

Good luck.

Re: Help me assess my readiness for the CISSP exam

rslade — Wed, 15 Jan 2020 19:25:54 GMT

> Vigenere (Viewer) posted a new topic in Certifications on 01-14-2020 02:04 PM

> I hoped you can help me
> answer this question by sharing your experience and particularly the moment when
> you said to yourself "I am ready, I got this!"

Well, I'd reviewed over 300 titles of the source security literature when I sat the exam, so, I was ready.

However, you might want to check out
https://community.isc2.org/t5/Certifications/CISSP-questions/m-p/18626

Also, read "Security Engineering" by Ross Anderson.

(Also, make sure you know the De Vigenere cipher.) (Which De Vigenere didn't invent and actually didn't like very much.)

Re: Help me assess my readiness for the CISSP exam

Vigenere — Wed, 15 Jan 2020 19:58:23 GMT

Thank you, @dippydog1932 !

I have already enrolled in the Cybrary course and I'll definitely get the app. Exactly as you said, I am confident with the concepts but it's hard to find questions that are as challenging as the ones on the real exam.

Re: Help me assess my readiness for the CISSP exam

Vigenere — Wed, 15 Jan 2020 20:00:05 GMT

Thanks @rslade ,

About the book "Security Engineering", isn't it slightly outdated?

I noticed the last edition is from 2010.

Re: Help me assess my readiness for the CISSP exam

rslade — Wed, 15 Jan 2020 20:29:24 GMT

> Vigenere (Newcomer I) mentioned you in a post! Join the conversation below:

> Thanks @rslade , About the book "Security Engineering", isn't it slightly
> outdated? I noticed the last edition is from 2010.

First, classics do not age. Classics deal with the foundations (which is what you are
mostly going to be tested on for the exam). Peripheral and ephemeral stuff comes
and goes, and you will see some references to those issues in exam questions, but
the heart of the exam is the basic concepts.

Second, you can wait, if you like, for the new version, but that probably won't be
until the fall.

Third, if you *really* can't afford to invest in your career, you can read it online
for free:
https://www.cl.cam.ac.uk/~rja14/book.html
But you'll probably want to keep it as a reference.

======================
rslade@vcn.bc.ca slade@victoria.tc.ca rslade@computercrime.org
"If you do buy a computer, don't turn it on." - Richards' 2nd Law
"Robert Slade's Guide to Computer Viruses" 0-387-94663-2
"Viruses Revealed" 0-07-213090-3
"Software Forensics" 0-07-142804-6
"Dictionary of Information Security" Syngress 1-59749-115-2
============= for back issues:
[Base URL] site http://victoria.tc.ca/techrev/
CISSP refs: [Base URL]mnbksccd.htm
PC Security: [Base URL]mnvrrvsc.htm
Security Dict.: [Base URL]secgloss.htm
Security Educ.: [Base URL]comseced.htm
Book reviews: [Base URL]mnbk.htm
[Base URL]review.htm
Partial/recent: http://groups.yahoo.com/group/techbooks/
http://en.wikipedia.org/wiki/Robert_Slade
https://is.gd/RotlWB http://twitter.com/rslade
http://blogs.securiteam.com/index.php/archives/author/p1/

Re: Help me assess my readiness for the CISSP exam

Vigenere — Thu, 16 Jan 2020 15:43:48 GMT

@rslade

Interesting, thanks for all the details!

Re: Help me assess my readiness for the CISSP exam

me_shail — Sat, 18 Jan 2020 05:31:35 GMT

Welcome and sorry to hear about your previous result. With CISSP, as the questions in the exam are not B&W same applies to various perspectives and advises. I also passed my CCSP (May 2019) and CISSP (Dec 2019) in the first attempt. In terms of preparation I used Boson tests (only once) and never cared what % I was getting. Did ISC2 Prac test (only once) in one go and again never cared about the scores. I used Shon Harris 8th edition, Official CBK (pretty much use less) and Sybex official study guide. Nothing else. If you keep on doing practise tests then I suspect you will train your brain to a point that it will start to look for obvious choices and do lesser thinking. I felt that myself. 11th hour is a summarised book so you summarised a summarised book. I don't know how much time you have but I swear by Shon Harris, if someone wants to make notes, Shon Harris is a very good choice and so is Sybex Official guide.

Unlike other exams CISSP basically tests your capability to apply the knowledge in the field. If you are able to see the use cases which you didn't notice before, that means you are getting the concepts. An example can be the assessment of the Information Security Management Policy Framework which involves Policies, Standards, Procedures, Guidelines etc and regulatory/compliance requirements of your organisation.

Other example can be to look for data protection standards and see what ciphers are being used, are they relevant and in commensuration of the value of the data, key management etc.

My subjective assessment is CISSP is all about applying the knowledge and select the best approach under given circumstances.

Good luck for the next try mate

Re: Help me assess my readiness for the CISSP exam

Vigenere — Sun, 19 Jan 2020 22:42:10 GMT

Thanks @me_shail. I saw the Boson tests referenced often, so I will definitely check them out.
I have already enriched my practice test base by downloading the official CISSP app and I have obtained the ISC2 Official Study guide as well, which I will use to integrate my knowledge. Additionally, I have already started doing mindmaps for the topics that I find more challenging to remember. Lastly, I am going through the Cybrary course which I find very good.
About the time, I have as much time as I need.
One of the reason my first attempt failed is that I was kind of forced to do the exam within a certain deadline due to organizational budgeting deadlines. I am not going to fall into this trap once again and I will book the exam only when I feel entirely, truly confident.

Re: Help me assess my readiness for the CISSP exam

ajessentials1 — Sat, 25 Jan 2020 15:32:38 GMT

The CISSP exam is difficult if you answer from the technical point of view. I passed the exam in November 2019 and had to constantly remind myself to answer each question from a management or even C-suite perspective. After you complete a chapter from the Official Study Guide, teach what you’ve learned. I also used the first chapter as a guide for studying the rest of the material. This means knowing how to approach any issue or question from a CIA triad perspective.

Hope this helps and good luck on your road to becoming a CISSP.

Re: Help me assess my readiness for the CISSP exam

Bas73 — Sun, 26 Jan 2020 10:59:55 GMT

Study the book! That's basically it. I constantly used the official CISSP study and test apps on my phone to check the level of my knowledge and watched Kelly Handerhan explain it to me on Cybrary videos.

The questions on the exam are way different than anything you can practice online. Anyway, I'm positive that if you put enough effort in it that you can pass.

Good luck!

Re: Help me assess my readiness for the CISSP exam

me_shail — Wed, 29 Jan 2020 04:11:11 GMT

Looks like you have it under control. Good luck.

Re: Help me assess my readiness for the CISSP exam

Vigenere — Wed, 02 Sep 2020 18:00:02 GMT

Friends,

I am happy to communicate that I have provisionally passed the CISSP Examination at my second attempt, today.

Following up on this thread, I'd like to explain how I integrated my study practices hoping that my experience could help other members of this valuable Community from which I have received substantial help.

After having essentially exhausted all the questions on the Pocket Prep application, I went for another good round of theory and practice. I bought the Official Study Guide (Eighth Edition) and I have read it cover to cover on my Kindle. This is probably the first big book that I have studied on Kindle and I have to say my experience was great. I made hundreds of digital notes of it and commented on all the parts that were hard for me to digest. I have almost never read those notes back, but the sole fact of commenting made it easier for me to process the given piece of information. At the end of each chapter, I would do both the written test and the 20 review questions. For every wrong answer, I would re-read the concept and try to understand it better and describe it in my own words.

In parallel, I subscribed to the Sybex/Wiley portal and downloaded the CISSP Study Official App. Without exaggerating, I think that over the last one year and a half I didn't let a day go without doing a quiz (ok, maybe 1 or 2, but you get the idea 😉

On the Wiley portal alone, I clocked more than 16 h of pure quiz time averaging ~ 82% correct answers. For every single quiz, I would review the wrong answers and understand why I got them wrong and how I could change my mindset to get them right. I also took screenshots of the answers I got wrong, for me to review multiple times.

Another very useful source was the Cybrary Course by Kelly Handerhan. I watched it once, in parallel with my Study Guide read and I listened to it fully once again, the days preceding the exam. I especially found this last practice very useful to "bring it all together".

Last but not least, I have read and tried all the questions posted in this thread (thank you @rslade !)

They were very useful to set my mind back on the real exam question type (as all of you said, very, VERY different from everything one can find online).

Oh, and I made mindmaps (especially one for Cryptography which I'll share with this community as soon as I have a moment). I even made up songs to remember the Block and Key Lenght of each Block Cipher and jotted all down today on my note page... and surprise, no questions about that! 🤣

Now, I'd like to answer my own question: "When was the moment when you felt you got it?"

In my particular case, I have never reached that moment. This is by far the hardest exam I have ever written and the one I have studied for and suffered for the most. The scope and subjects are so broad that I don't think one person can possibly achieve 100% confidence in everything. I did, however, get to a point when I realized that "I had never been MORE ready than now and I don't know if I'll ever be without working another 20 years in this field".

To sum it all up, this is a scary, complicated, challenging test. The key to success, in my opinion, is perseverance.

Don't set the goal to study and do this test in 1 or 2 months. Allow yourself the time to soak up the concepts and make them yours. Don't care too much about deadlines and enjoy the journey.

The exam's only purpose should be to validate the knowledge, experience, and mindset that you have gained over the years.

Thanks again, everyone!

Re: Help me assess my readiness for the CISSP exam

abhattac5 — Tue, 23 Nov 2021 23:32:20 GMT

Hi there. The big thing IMHO is to use as many comprehensive materials as you can. Just relying on Eleventh Hour was probably the biggest issue there - I think you should try starting with a much more comprehensive starting point like the Official Guide or All-in-One. A combination of Dummies / Official Guide / All-in-One / Eleventh Hour may be the way to go. It also depends on how much time you have - maybe you can try one for in-depth studying (either All-in-One or the Official Guide) and the other for superficial cramming (either Dummies or Eleventh Hour). Don't forget practice questions or practice tests!

If you would like a more detailed look at how I passed, you can check out my related post here.
https://community.isc2.org/t5/CISSP-Study-Group/Passing-the-CISSP-My-Experience-Oct-2021/m-p/48366#M129

Hope that helped. Good luck!

Re: Help me assess my readiness for the CISSP exam

Eman96 — Fri, 27 Jan 2023 19:26:07 GMT

Thanks for following up on your experience. I'm supposed to write the exam in 4 days but thinking of pushing a week. Getting 76% consistently on Sybex practice exams but never feel confident. I'll take a look at some other resources from this thread.