topic Re: ISC2 set you up for failure when it comes to taking the CISSP test for theset 3 reason in my opo in Exam Preparation

ISC2 set you up for failure when it comes to taking the CISSP test for theset 3 reason in my oponion

fsohrabi — Wed, 07 Jun 2023 13:47:21 GMT

I think ISC2 set you up for failure on purpose for 3 reasons. To make sure most people do not pass the test. The reason is not that the person did not Study or study hard enough, but I think for these particular reasons below

1. Exam Type CAT. With the computerized random test, they make sure that you can't mark a question if you are unsure of the answer and come back to it later. Also, they add a fan to the flame by making sure that when you get a question wrong they ask you more of the same type of question wrong to lower your score

2. They give you an unreasonable time limit. The test comprises 100-150 questions because it is the CAT type of exam. However, you have approximately 1 Minute or so for each question. I say not enough time to read, and comprehend all the question and all the answers and comprehend it and be able to eliminate the wrong answers to pick the correct one. Especially when you are given a scenario-type question that is very tricky and uses tick words to try and confuse the exam taker.

3. They throw in 50 questions or so that are going to be on future exams. I say because of this, the test take is unable to evaluate how they are doing because We don't know which questions are the throwout questions. Therefore that adds to the stress of taking this exam. Also not know when the test ends so you don't know if the test will end at question 99 or question 150.

Therefore besides the exam itself being hard and filled with trick-type scenarios these 3 reasons in my opinion add to the stress of taking this exam and a higher chance of failure. If I am wrong tell me why please, and I will remove my article.

Re: ISC2 set you up for failure when it comes to taking the CISSP test for theset 3 reason in my opo

fsohrabi — Wed, 07 Jun 2023 13:53:43 GMT

To give an example a question might ask which one of these is not an example of Due Diligence.
Now if you are reading the question fast you might not pick up on the word NOT. So this question is asking which one is an example of Due Care. So now even if you pick up on the word NOT, you still have to read each answer carefully and be able to determine if it is an example of Due care or Due diligence. and I say there is not enough time when you have 100-150 types of questions like this which can be very tricky.

Re: ISC2 set you up for failure when it comes to taking the CISSP test for theset 3 reason in my opo

JKWiniger — Wed, 07 Jun 2023 15:54:27 GMT

Honestly, this reads like you missed the exam and are just venting. I am not sure but I believe the use adaptive testing like everyone else nowadays. And with this kind of test the questions change based of your answer, this would be why you can't go back. With the time limit, if you answer right you get less questions, but when you answer wrong you get more, so it is very subjective. As for trick questions, welcome to the world! I have taken many tests by many different vendors and they all do it. You MUST always read carefully. The worst I have found is when they ask for "the best" answer when a few answer are right. Way back when I took the CISSP it was on paper and even then I left the room with no idea if I passed or failed...

John-

Re: ISC2 set you up for failure when it comes to taking the CISSP test for theset 3 reason in my opo

gidyn — Wed, 07 Jun 2023 18:45:19 GMT

See all the "passed" posts on https://www.reddit.com/r/cissp/. It is clearly doable, and a lot of people do.

Re: ISC2 set you up for failure when it comes to taking the CISSP test for theset 3 reason in my opo

emb021 — Wed, 07 Jun 2023 20:38:26 GMT

Will agree with JKWiniger.

I had postponed my CISSP test several times. While I had been in the field for years I only used the office CBK book at the time, and a practice exam book. that's it.

I finally went in a took it. This was BEFORE the computer adaptive testing. I went thru, answered each question as best I could. I don't recall going back on any questions, but may have for 2-3.

I wasn't there very long.

I finished, and went out. The lady at the desk said I still had time, but I just said I'm done. She printed out the results and I had passed. Of course, if you pass you have no idea what your score is. But it was such a relief. There were a LOT of questions on encryption, and don't know if they were dummy questions.

Re: ISC2 set you up for failure when it comes to taking the CISSP test for theset 3 reason in my opo

gidyn — Thu, 08 Jun 2023 06:36:29 GMT

My personal experience was that after going back to a question or agonising over it for ages, I didn't have a better answer than my initial thought.

Re: ISC2 set you up for failure when it comes to taking the CISSP test for theset 3 reason in my opo

denbesten — Fri, 09 Jun 2023 00:47:02 GMT

I too concur with John.

It may help to realize a few things:

It is in (ISC)²'s financial best interest for people to pass exams and become certified. Each new member brings with them another highly-profitable $125 (or $50 if CC) annual maintenance fee. Failures *might* result in a retake fee, but exams have a lower profit margin because (ISC)² must pay PearsonVue per attempt.

The exams are highly instrumented. (ISC)² knows exactly how long each person before you spent answering each question. They can measure how long is needed, with no speculation necessary. The best advice I can offer is to build an internal feel for how fast one must move by timing yourself during practice exams and to do many practice exams (even non-security) to develop the skill of quick comprehension.

Watching/worrying about progress risks becoming the hare in "The Tortoise and the Hare". The best strategy is to answer each question to the best of your ability, starting with the first question and continuing until the very last. If you were to learn you were 1% below proficiency, what would you do differently? I would hope nothing because you should be doing that already.

The CAT stops early if it is sure you will pass/fail. No need to waste time if you have already earned 700 points or have lost 300. I do agree though that uncertainty creates avoidable stress, particularly once one is asked question 126. One fix might be to ask fewer non-graded questions if the CAT believes the exam will go long, so that everyone ends up stopping at (e.g.) exactly 150 questions.

Re: ISC2 set you up for failure when it comes to taking the CISSP test for theset 3 reason in my opo

csjohnng — Fri, 09 Jun 2023 02:40:01 GMT

I have shared my opinion in the other post. I think it's open for discussion and agree to disagree. But when we point out issue, if there are "facts" to support, then it's more easy to discuss or debate, otherwise, it is a just shallow discussion.

1) Exam Type CAT.
CISSP is CAT. I have waited until the CAT and took the CISSP test back in 2018, and I don't really want take the 6 hour paper version. it's very exhausted to do the 6 hours. With CAT, this enable the differentiation of the candidate's ability.

2) Unreasonable time
I am not a native English speaker and I took 10 ISC2 exam/test in English and I passed all in the first attempt with fairly good amount of time left (mostly), except ISSEP which I got only a couple minutes left. If you found it's insufficient time, then it's back to your knowledge, how you familiar with the domains being tested and or your time management during the test. Of course a native speak can have advantage on reading and understanding the questions, but if a non-English speaker can finish all the test on time, we need to question if this is a matter of insufficient time given or if this is an issue related to how familiar with the domains being tested?

And CISSP with 100-150 questions in 3 hours ( it's now 125-175 question in 4 hours I believe), you really need to spend your time wisely, this is universal in every tests.

Spending 3 minutes in answering 1 question with wrong answer, score the same as spending 1 minute and have wrong answer on the same question, the different is you lose 2 mins ( resulting you got less time in reading and answering the others question), realize you don't know (unsure) the answer, and making your best or educated guess is also a skill. I guess it's very rare to have someone to get 100% correct with the given time and the test does not require you to get 100% to pass ( you only need to score 700/1000 to pass)

3) Even if there is experiential questions, they are not counted in the scoring. Also security is not a "static" one.

I don't think ISC2 is intentionally set-up for candidate for failure, but rather one's insufficient knowledge, experience is setting up their own failure for the exam/test in the first place.

Re: ISC2 set you up for failure when it comes to taking the CISSP test for theset 3 reason in my opo

ericgeater — Fri, 09 Jun 2023 13:20:24 GMT

@fsohrabi wrote:
even if you pick up on the word NOT, you still have to read each answer carefully and be able to determine if it is an example of Due care or Due diligence.

Is there any value added by an exam which can seem contextually granular and unnecessarily precise? That value may not be easy to find, but when I was studying for this exam, I realized early-on that I might have bitten off more than I could chew.

But somewhere in my fourth month of reading was when it clicked. That was when I realized that my boat may be swamped, but I was starting to navigate the bayou. The book which really helped me here was Chapple's Eighth Edition. It was an excellent read, and it ties the domains together very neatly.

As soon as I learned to bail out my boat and keep navigating, my confidence was set. I passed the adaptive test.

But I still read each answer carefully.

Re: ISC2 set you up for failure when it comes to taking the CISSP test for theset 3 reason in my opo

tldutton — Wed, 19 Jul 2023 19:25:33 GMT

1. The ability to mark a question and go back to it later has not been an option for at least two years, regardless if it is a CAT exam or linear exam.

2. The exam now consists of 125-175 questions and you have 4 hours to complete the exam. That gives you approximately 1:22 to 1:55 to read/answer each question (dependent on how many total items you're presented)

3. We continuously work with volunteer Subject Matter Experts (SME) who already hold the CISSP certification to develop new items (questions) for the exam. These questions are placed on the exam to determine if they are statistically acceptable items (not too hard or too easy). If they meet our statistical requirements, they will then become an "operational" or "scored" item on a future version of the exam. If they don't, then we send the items back to SMEs with guidance on what needs to be changed (based on statistics).

Since I've been personally involved in dozens of content development workshops over the past two years as well as having reviewed thousands of items, I can assure you that none of the questions are written to be intentionally "tricky"; attention to detail is paramount and our statistic-based approach to exam content performance bears this out.

Please keep in mind that I nor my team create ANY of the exam content; that is done by volunteer SMEs (your peers) and the items created by those SMEs are peer reviewed within the item writing workshops as well as reviewed by a group of SMEs during a group review workshop. Everyone on my team holds at least the CISSP and are members too.

If you or anyone else wants more clarification, please reach out to me directly via private message.

Many thanks!

Terence L. Dutton

Senior Exam Content Development Manager

CISSP #333526

Re: ISC2 set you up for failure when it comes to taking the CISSP test for theset 3 reason in my opo

BrittneyWidmer — Sun, 12 May 2024 20:08:27 GMT

@tldutton I have a question regarding how the questions are set. You mentioned they are submitted by groups of SMEs and evaluated prior to being placed in as ungraded questions to determine their performance. Why is it that the language of the questions are not held to a standard? For example, you will often hear individuals regarding the test as a reading comprehension exam due to the nature of diversity in language used for a single term/definition. I have heard over and over that often the terms seen do not match the official study guide or any materials published by ISC2. I don't understand why ISC2 would not require a standardization of language across questions/definitions if they are truly trying to be the 'voice' of best practice in information security. Anu thoughts? Thank you in advance!

Re: ISC2 set you up for failure when it comes to taking the CISSP test for theset 3 reason in my opo

gidyn — Mon, 13 May 2024 13:40:28 GMT

I suspect that this is deliberate, to separate those who understand the concepts and are able to apply them in practice, from those who have just memorised lots of text.

Re: ISC2 set you up for failure when it comes to taking the CISSP test for theset 3 reason in my opo

tldutton — Thu, 23 May 2024 22:07:57 GMT

First, there are NO trick questions on any of our exams.

Second, there are very few scenario-based questions on exams; as we come across them during our reviews, we get those questions rewritten.

Third, the verbiage used in all of our questions is based on what is the prevalent language of the profession at the time the question is written.

Fourth, the average amount of time per question hasn’t changed much over the years. When I took the exam in 2009, I had an average of 1.44 minutes to answer each question; the average time is 1.2 minutes. Keep in mind that our questions have actually gotten shorter over time.

Fifth, when you get a question wrong, we ask you more questions in the same area to determine your competence in that area, NOT T
to lower your score.

Sixth, as part of our job requirements, everyone on my team, including myself, must have at least the CISSP before we could even apply for the position. This means that we were members before we joined ISC2 and are still member since have the same requirements to maintain our certifications like any other member. In order to maintain our ANAB accreditation, we have to prove that are exam are fair, equitable, and free of bias.

Seventh, my team and I as well as the entire ISC2 organization would rather you pass the exam and become a member than fail the exam.

Finally, all of our questions follow a standardized style guide to ensure every question is standardized from a style perspective as possible.

Each of our items on every exam uses language:
That is neutral to demographic background (e.g., culture, nationality, gender), evidence-based, ethical, and legal.

That never references a specific race, ethnicity, or gender or use pronouns (e.g. “you”, “he”, “she”)

That avoids overly specific knowledge, verbatim phrasing, and opinion-based content

That avoids using obscure words or phrases and regionalized or nationalized speech, slang, colloquialisms, and jargon

That uses “will/shall” instead of “would/could” to eliminate bias in interpretation

That avoids trick items, those that mislead or deceive into answering incorrectly

That is at an acceptable reading level and avoids wordiness

That does not result in negative questions by eliminating the use of NOT or EXCEPT since it creates undue cognitive burden.

If you’ve passed any of our certification exams, I personally invite you participate in one of our item development workshops so you see the work that goes into every question. Just send me a DM, and I’ll give you my work email address so I can get your information to add you to our pool of volunteers.

Re: ISC2 set you up for failure when it comes to taking the CISSP test for theset 3 reason in my opo

ericgeater — Fri, 24 May 2024 13:30:37 GMT

This was an excellent exposition. Thank you for writing it.

Re: ISC2 set you up for failure when it comes to taking the CISSP test for theset 3 reason in my opo

Deutscher — Sat, 25 May 2024 21:48:02 GMT

I can tell you this out of experience. I have got my first CISSP exam in which i failed miserably. There were 3 domains that I was below proficiency. I felt like "If I cannot do it, no one can do it". seriously.

Instead of giving up, this made me more passionate about studying and finding my mistakes. Because in the first one, I got 175 questions which is supposed to mean that they were easiest questions according to CAT.

I started to read discussions about ideology of CISSP where people discussed too many aspects etc etc.

Then I have realized that I was still thinking like a technician, not like a manager/CISSP. I focused on changing and improving my point of view.

On my second attempts last wednesday, I passed it only with 100 questions. You can do it. You should just try to think more like a CISSP, than a technical person.

Re: ISC2 set you up for failure when it comes to taking the CISSP test...

acacia318 — Sun, 24 Nov 2024 13:16:41 GMT

Point one is a "Is the glass half empty or half full" question. Is it the case that ISC2 is being cruel by picking at an area that the supplicant has already proven themself unworthy, or is ISC2 giving the aspirant a 2nd chance to redeem himself/herself by asking the question again?

OBTW. While you offered, you shouldn't remove your post. It speaks to ideas that other people have had and will have. I've never seen an idea that was so dangerous that rational people couldn't, at minimum, broach the topic. For example, there is the subject that has much gravitas -- the Hawaiian Pizza controversy... 🙂

Re: ISC2 set you up for failure when it comes to taking the CISSP test for theset 3 reason in my opo

akinoreoluwa777 — Wed, 12 Mar 2025 22:54:21 GMT

Any exam you finish and you are not sure of you fail or pass is not really adding value because it means the exam is subject to a lot a guess, the exam is subjective and examiners opinion is the final.

Re: ISC2 set you up for failure when it comes to taking the CISSP test for theset 3 reason in my opo

JKWiniger — Thu, 13 Mar 2025 12:17:30 GMT

@akinoreoluwa777 I would have to disagree with you on this point. I took the test back when it was paper and pencil and I mentioned to someone just yesterday how after that test I didn't know if I passed or not and how back then you had to wait months to get the results. The CISSP is said to go an inch deep and a mile wide so you have areas you are strong in and areas you are weeks in and of course areas you are so so in. It's such a wide range it's easy to hit a lot of things you might know but are not confident that you know. You can thinking of it like taking the SATs, I don't think many people come out of that knowing exactly how they did, because here again a lot of material is covered...

As for me... many months after I took the test I was pleasantly surprised that I passed on my first attempt...

John-

Re: ISC2 set you up for failure when it comes to taking the CISSP test for theset 3 reason in my opo

emb021 — Thu, 13 Mar 2025 16:53:04 GMT

@akinoreoluwa777 Oh, please.
Certification exams used to ALL be paper based. So were (and maybe still are) SAT, ACT, GRE, etc exams.
While ISC2 when to computer based several years ago, ISACA was still doing paper exams until just a few years ago. ALL 4 ISACA cert exams I took were paper exams. I remember walking out of them uncertain if I passed, only to learn via email a month later that I did or not (only 1 I failed on my first go around).

While its great that we can get immediate scoring on our exams, this is a relatively new thing.