Keep studying, the end product (passing the CISSP) is worthwhile even if it feels like an inordinate amount of effort to get there. Below are some general observations and recommendations concerning testing in general.
- Read everything or at least familiarize yourself with everything in the bibliographies that you can. Even though there is a great deal of information in the books themselves the "biblios" will always be worth exploring. Not to buy or read every resource going but you will see overlap enough from various sources to peak your interest in one or two sources - follow those leads.
- These commercial or after market tests get easier over time with practice. Personally, I have sat for close to 50 in my career and smell distraction questions in my sleep. Look up psychometric and CAT testing and see if there is anything you can learn from these techniques. The field changes frequently enough to warrant doing this once or so a year.
- When studying, learn to apply as many 'when' questions to a problem, theory or idea as possible. In other words use the word 'when' as you ask yourself how to apply this to a question. For example. When would I see symmetric encryption under these circumstances. There are hosts of these types of questions on not only the CISSP but any long form test.
The rest of it you probably already know so I won't belay the topic with trivial droning.
Feel free to ask the board for more tips and ideas, resources, etc. We've all been there.
- Brent Eads, CISSP-ISSAP, HCISPP... blah, blah.
