Passed CISSP! (6/27/2017)
shimasensei
Member Posts: 241 ■■■□□□□□□□
in CISSP
First of all, thank you to this awesome community of like-minded professionals! This was where I got inspired to seriously pursue the CISSP. The shared experiences of the ones who have gone before is invaluable.
A little bit on my background:
- first CISSP attempt
- about 5 years of IT/IS professional experience
- I've worked in finance, tech and defense industries
- currently working a full time job with a wife and young son at home
- recently started part time IT/IS consulting
Study materials:
- Cybrary.it CISSP course by Kelly Handerhan
- Official Sybex study guide
- Official Sybex & Wiley practice exams (included with study guide bundle)
Time/numbers:
Study duration: About 2 months (since mid-May)
Sybex study guide: Read every page and continuously review weak areas.
Cybrary course: Watch and re-watch every video.
Practice questions: About 2750 total, review the incorrectly answered questions, understand the explanation and concepts behind it.
Exam time: Took about four hours
Exam approach tips:
- "SECURITY TRANSCENDS TECHNOLOGY"
- think from the perspective of your role as RISK ADVISOR / MANAGER
- DO NOT try to always fix the problem (technical troubleshooting mindset)
- focus on change control / process
- focus on following policies / procedures
- you are consulting / informing vs. action
- look out for answers that involve bureaucracy and red tape
- Senior Management - ultimately responsible / liable for security
- How much security is enough? = just enough (based on cost/benefit analysis)
- All decisions start with -> Risk management
- Risk management starts with -> Identifying and valuating your assets
- Physical & life safety is ALWAYS the priority / first choice!
- Don't get too deep! or overthink
- the exam is a mile wide and inch deep
- Incorporate security (baked in) as opposed to adding it later (sprayed on)
- Does it work, securely?
- Layered defense (defense in depth) - physical, administrative, technical
- Choose the BEST, not just the right, answer! (multiple answers that are right & appear right)
- Exam BREAKS are important! Be sure to bring snacks and drinks with you
*Provisionally* passed. Now on to the endorsement process!
Best of luck to all of you!
A little bit on my background:
- first CISSP attempt
- about 5 years of IT/IS professional experience
- I've worked in finance, tech and defense industries
- currently working a full time job with a wife and young son at home
- recently started part time IT/IS consulting
Study materials:
- Cybrary.it CISSP course by Kelly Handerhan
- Official Sybex study guide
- Official Sybex & Wiley practice exams (included with study guide bundle)
Time/numbers:
Study duration: About 2 months (since mid-May)
Sybex study guide: Read every page and continuously review weak areas.
Cybrary course: Watch and re-watch every video.
Practice questions: About 2750 total, review the incorrectly answered questions, understand the explanation and concepts behind it.
Exam time: Took about four hours
Exam approach tips:
- "SECURITY TRANSCENDS TECHNOLOGY"
- think from the perspective of your role as RISK ADVISOR / MANAGER
- DO NOT try to always fix the problem (technical troubleshooting mindset)
- focus on change control / process
- focus on following policies / procedures
- you are consulting / informing vs. action
- look out for answers that involve bureaucracy and red tape
- Senior Management - ultimately responsible / liable for security
- How much security is enough? = just enough (based on cost/benefit analysis)
- All decisions start with -> Risk management
- Risk management starts with -> Identifying and valuating your assets
- Physical & life safety is ALWAYS the priority / first choice!
- Don't get too deep! or overthink
- the exam is a mile wide and inch deep
- Incorporate security (baked in) as opposed to adding it later (sprayed on)
- Does it work, securely?
- Layered defense (defense in depth) - physical, administrative, technical
- Choose the BEST, not just the right, answer! (multiple answers that are right & appear right)
- Exam BREAKS are important! Be sure to bring snacks and drinks with you
*Provisionally* passed. Now on to the endorsement process!
Best of luck to all of you!
Current: BSc IT + CISSP, CCNP:RS, CCNA:Sec, CCNA:RS, CCENT, Sec+, P+, A+, L+/LPIC-1, CSSS, VCA6-DCV, ITILv3:F, MCSA:Win10
Future Plans: MSc + PMP, CCIE/NPx, GIAC...
Future Plans: MSc + PMP, CCIE/NPx, GIAC...
Comments
-
h1ck5r
Member Posts: 37 ■■□□□□□□□□
祝贺你！！
你提供的列表也很详细，我希望我第二次也会顺利通过！
//以下是翻译工具翻译版本 / / these are translated versions of translation tools
Congratulations!!
The list you provided is very detailed. I hope I will get through the second time!2017 Goals: CISSP(✔)
2018 Goals: Security+（✔）,Find a girlfriend（?）
2019 Goals: Find a girlfriend（?）
2020 Goals: Find a girlfriend（?） -
shimasensei
Member Posts: 241 ■■■□□□□□□□
祝贺你！！
你提供的列表也很详细，我希望我第二次也会顺利通过！
//以下是翻译工具翻译版本 / / these are translated versions of translation tools
Congratulations!!
The list you provided is very detailed. I hope I will get through the second time!
谢谢h1ck5r我的朋友！
让我们张贴下一次尝试。 最好的运气，不要放弃！
Thank you h1ck5r my friend!
Keep us posted on your next attempt. Best of luck and don't give up!Current: BSc IT + CISSP, CCNP:RS, CCNA:Sec, CCNA:RS, CCENT, Sec+, P+, A+, L+/LPIC-1, CSSS, VCA6-DCV, ITILv3:F, MCSA:Win10
Future Plans: MSc + PMP, CCIE/NPx, GIAC... -
NavyMooseCCNA
Member Posts: 544 ■■■■□□□□□□
Congrats!!'My dear you are ugly, but tomorrow I shall be sober and you will still be ugly' Winston Churchil
-
clarkincnet
Member Posts: 256 ■■■□□□□□□□
Congrats!Give a hacker an exploit, and they will have access for a day, BUT teach them to phish, and they will have access for the rest of their lives!
Have: CISSP, CISM, CRISC, CGEIT, ITIL-F -
shimasensei
Member Posts: 241 ■■■□□□□□□□
Thank you all for your support!Current: BSc IT + CISSP, CCNP:RS, CCNA:Sec, CCNA:RS, CCENT, Sec+, P+, A+, L+/LPIC-1, CSSS, VCA6-DCV, ITILv3:F, MCSA:Win10
Future Plans: MSc + PMP, CCIE/NPx, GIAC... -
musclegenesis
Member Posts: 9 ■□□□□□□□□□
Hi, would you recommend ccure or transcender for practice exams? -
h1ck5r
Member Posts: 37 ■■□□□□□□□□
shimasensei wrote: »谢谢h1ck5r我的朋友！
让我们张贴下一次尝试。 最好的运气，不要放弃！
Thank you h1ck5r my friend!
Keep us posted on your next attempt. Best of luck and don't give up!
Thank you. I'll keep on trying until the exam is over!2017 Goals: CISSP(✔)
2018 Goals: Security+（✔）,Find a girlfriend（?）
2019 Goals: Find a girlfriend（?）
2020 Goals: Find a girlfriend（?） -
TheRedBar0n
Member Posts: 60 ■■■□□□□□□□
Congrats man, thanks for the tips! Ordered the Sybex 7th study guide with practice tests kit and good to see it recommend so often. -
shimasensei
Member Posts: 241 ■■■□□□□□□□
Thank you all! Good luck on your CISSP endeavors.
I forgot to add I also used the CISSP Study and Test Exams iOS apps ($14.99 bundle, $9.99 separately), good for a quick quiz or flashcards while on the go.
@musclegenesis - I can't comment firsthand on both sources as I have not personally used them. I used the Sybex / Wiley test engine ~2750 total questions, I was contemplating on purchasing the Boson CISSP exam sim as well but ended up not buying it. From what I've read on other posts CCCure was used and works well, haven't really seen a lot regarding Transcender.
@TheRedBaron - Yes! You can't go wrong with the official ISC2 book and practice exams. However, I did realize on the test that there are topics there that were not covered on the book, they may be part of the 25 "experimental" questions or not, we may never know.Current: BSc IT + CISSP, CCNP:RS, CCNA:Sec, CCNA:RS, CCENT, Sec+, P+, A+, L+/LPIC-1, CSSS, VCA6-DCV, ITILv3:F, MCSA:Win10
Future Plans: MSc + PMP, CCIE/NPx, GIAC...
