Practice Questions

[rslade]

Right.

For (and from) all the newbies out there who want help for studying, there have been numerous questions about, well, questions.  As in, "what's the best set of practice questions to use while studying for the exam?"

The answer is, none of them.

I have looked at an awful lot of practice question sets, and they are uniformly awful.  Most try to be "hard" by bringing in trivia: that is not representative of the exam.  Most concentrate on a bunch of facts: that is not representative of the exam.

So, from my own stash, collected and developed over the decades, I'm going to give you some samples that do represent the types of questions that you will probably see on the exam.  Note that none of these questions will appear on the exam.  You can't pass the CISSP exam by memorizing a brain dump.  These will just give you a feel.

For each question I'll give the answer, what type of question this represents, and possibly ways to approach this type of question.

I'll be doing this over time, "replying" to this post to add questions.  Others are free to add sample questions if they wish, but be ready to be (possibly severely) critiqued.

[Jfordbos]

I am using 'all in one' and expect/hope that it will be 'all I need' (at least as the PRIMARY study source I've been using). The other source is the ISC2 CISSP CBK book.  Taking exam tomorrow (2nd attempt), feeling at least 70% totally confident.    😉

[Jfordbos]

Provisionally passed the exam yesterday. Thank you to Rob Slade for these sample questions and also for Rob’s YouTube series that are in progress currently. Any and all sources of study are valuable, but nothing can completely prepare you for the types of questions you’ll see on the exam, not to mention their respective answer choices which can indeed be maddening. Good luck to all!

[afaye]

Domain 1

[icebw22]

Hi @rslade 

Do you mean useraccounts?  

Usercodes is bit confusing term to use

[Rooks]

Thank you @rslade @dcontestidcontesti and everyone for sharing your knowledge and expertise to help all. - much appreciated.

On this question the answer is clear but wondering if you can shed some light between the "Ultimate responsible" vs " Accountable".  I understand CISSP uses these terms interchangeably but there's is a distinctive difference between these two terms.

In general, -

Responsible refers to who are in charge for taking care of / manage somethings (e.g. assets)

Accountable refers to where the bucks stop - these are the folks who are liable in the end.

Thanks  
 

[Rooks]

Thank you again @rslade  @dcontesti,and everyone!

I am just curious, would you be able to share if you have faced or may appear on the exam any Cloud, Zero Trust specific type questions?  I reviewed all the questions here but don't see any sample questions from Cloud or Zero Trust specific. Cloud and Zero Trust are the big things these days.  Thank you. 

[Rooks]

In CISSP, it appears "Ultimate Responsible" and Accountability are used interchangeably. This is indeed confusing as there are suttle difference between responsible and accountable. Thx

[dcontesti]

@Rooks

Sorry but Rob no longer posts to this forum.  I believe he left the forum 2 - 3 years ago.  He was the MAIN contributor here, I only occasionally commented.

As to your question on Zero trust, you need to be prepared to answer questions on this topic and others according to the CBK (Exam Outline)

https://www.isc2.org/certifications/cissp/cissp-certification-exam-outline

d

[Rooks]

Hi @dcontesti thanks for your reply and quick update.

@rslade wish you continued - it was awesome. Not sure you are contributing this somewhere else? Thx

[Ianub40]

Thanks for the insight.
However, if the 'senior management' was not there in the answer , the next best alternative would have been the data owner , right ?