Practice Questions

[rslade]

Right.

For (and from) all the newbies out there who want help for studying, there have been numerous questions about, well, questions.  As in, "what's the best set of practice questions to use while studying for the exam?"

The answer is, none of them.

I have looked at an awful lot of practice question sets, and they are uniformly awful.  Most try to be "hard" by bringing in trivia: that is not representative of the exam.  Most concentrate on a bunch of facts: that is not representative of the exam.

So, from my own stash, collected and developed over the decades, I'm going to give you some samples that do represent the types of questions that you will probably see on the exam.  Note that none of these questions will appear on the exam.  You can't pass the CISSP exam by memorizing a brain dump.  These will just give you a feel.

For each question I'll give the answer, what type of question this represents, and possibly ways to approach this type of question.

I'll be doing this over time, "replying" to this post to add questions.  Others are free to add sample questions if they wish, but be ready to be (possibly severely) critiqued.

[letona79]

Thank you very much for your time, it is greatly appreciated.

However, I thoght that I was solidly prepared for the exam and now I am in the deepest of slumps. If all the questions are like this I think I am far from getting a 70%.

[SanjeevK]

I would request to have access to the practice questions for my preparation for the CISSP exam

[LHablas]

Sanjeev...the practice questions in this blog are spread throughout. You simply need to read from the beginning - there's not an app. Best wishes with your prep.

[jubbly]

The wording is playing mental gymnastics in my head.

Is this effectively stating the controls used when developing a system is a standard method when measuring the performance of the project?

[shrikant]

The answer should be (b) check on internet

[Bongzetra]

Hi @rslade , took 2 days going through this thread and responding to your questions, they really did change my thought process. Passed by exam yesterday. Kudos!

[Jfordbos]

I believe the key here is the use of the word 'program'.  A virus replicates by attaching itself to other 'programs' whereas a worm replicates itself by moving between hosts/systems themselves (not programs).

I think.   🙂

[Jfordbos]

Congrats!  I don't recall seeing any acronyms link on my exam (taken/failed May 2023).  Maybe they removed that or you were taking a different format of the test (mine was adaptive, 175 questions including 50 'test' questions that don't count for ISC2 eval / exam development purposes).  I'm going after attempt 2 tomorrow 11/21 and feel much 'better' about my prep this time around, focusing on 3 domains where my first test said I was 'below proficiency' with the remaining 5 being 'above proficiency' or 'near proficiency' (I love those rather subjective descriptions of 'proficiency' by the way but at least the 'below' ones really, really tell you where you're weakest so you can shore that up on subsequent exam attempt(s).

[Jfordbos]

Other/better words instead of 'label' could be 'categorize' or 'classify' but all of them come back to discovery of an asset and how important it is to the business.  MUST do that before any of the other options/answer choices.