Going for SSCP soon..

in SSCP
Well I always like to talk (or in this case type) about my certification experience and "road to success"
or "the agony of defeat" [insert Wide World of Sports ski jumper here].
I do this for a few reasons. One is to share with others the pain and frustration associated with studying.
Two, to give back seeing I've spend some time reading other peoples posts on the subject matter, and
three gives me a break from studying.
Seeing the exam will be computer based soon (June 1st 2012) I figured I could afford cramming a bit more and
get to the exam quicker. If it wasn't for the fact it's going computer based, December of this year was the nearest
and only viable exam date for me. 7 months of studying for 7 domains does have a nice ring to it..
but a bit much for this exam I think.
So here's my plan and what I've done (and doing):
Darril Gibson's AIO
-So far good and easy read. No complaints
CBT SSCP nuggest
-Out of date, bad jokes but it has it's moments
And some of Shon Harris' CSSIP stuff scattered into the mix.
Planing on getting a few studISCope Self Assessment. Seeing they've been highly recommended from what I've read
here so far. The questions in the AIO book are nice to review what one has read, but from experience are nothing
like the real exam.
I have no clue when I'll be taking the exam, but hopefully before December.
So I have a question for those out there about the wording. Not sure if it's been asked here, didn't see if it is .. sorry.
I know the CISSP exam questions have been referred to by some of my friends as "dribble" and don't make much sense at all.
Kinda like a Chinese guy translating from Spanish to French, just so a Korean can write it up into English...
Are the SSCP exam questions similar to the CISSP? In writing style etc?
Thanks.. I'll try and update this thread on an on/off basis.
(hmm first post I think)
or "the agony of defeat" [insert Wide World of Sports ski jumper here].
I do this for a few reasons. One is to share with others the pain and frustration associated with studying.
Two, to give back seeing I've spend some time reading other peoples posts on the subject matter, and
three gives me a break from studying.

Seeing the exam will be computer based soon (June 1st 2012) I figured I could afford cramming a bit more and
get to the exam quicker. If it wasn't for the fact it's going computer based, December of this year was the nearest
and only viable exam date for me. 7 months of studying for 7 domains does have a nice ring to it..
but a bit much for this exam I think.
So here's my plan and what I've done (and doing):
Darril Gibson's AIO
-So far good and easy read. No complaints
CBT SSCP nuggest
-Out of date, bad jokes but it has it's moments
And some of Shon Harris' CSSIP stuff scattered into the mix.
Planing on getting a few studISCope Self Assessment. Seeing they've been highly recommended from what I've read
here so far. The questions in the AIO book are nice to review what one has read, but from experience are nothing
like the real exam.
I have no clue when I'll be taking the exam, but hopefully before December.
So I have a question for those out there about the wording. Not sure if it's been asked here, didn't see if it is .. sorry.
I know the CISSP exam questions have been referred to by some of my friends as "dribble" and don't make much sense at all.
Kinda like a Chinese guy translating from Spanish to French, just so a Korean can write it up into English...
Are the SSCP exam questions similar to the CISSP? In writing style etc?
Thanks.. I'll try and update this thread on an on/off basis.
(hmm first post I think)
Comments
So far the "read carefully" part seems to be the consensus...Still hoping for more feedback
A little update on my progress (study break right now)
Darrel Gibson's book really is an easy read. There are a few things that annoy me.
His excessive use of "For example...". Almost every second or third sentence starts off like that.
But I manage to skip those 2 words, no biggie.
Another comical part was when referring to crosss-site scripting as "CSS". And mentioning that it's occasional called "XSS".
Well this is obviously nothing major (hell not even minor), I just don't think of cross-site scripting when I see the acronym "CSS".
So far the studies are on track. If this keeps up, I may actually go for it this June.
Almost done my first read of the book, going for a more active-reading style for the second run.
And eventually those practice exams.
Thanks again,
Currently, I am using the following study materials:
Darril's AIO SSCP Exam Guide
TestOut's SSCP LabSim
SkillSoft SSCP 2012 Objectives
Purchased StudiScopes 3-pack of questions
CCCure.org CISSP questions
I have had a hard time getting used to the ISC2 way of asking questions but I am diligently studying Darril's book and following along with SkillSoft's 2012 SSCP objectives (this is available thru my employer). I like the TestOut materials but I am afraid they are not covering all of the objectives for the exam. They replied to an e-mail with my concern and told me their material wouldn't be available until the 3rd of 4th quarter of this year. Obviously, doesn't do me much good if I hope to take the exam in July.
I am enjoying Darril's book but I don't think the editor/proofreader helped Darril much. For example [grin], on Page 42 of the book, there is a chart that explains Bell-LaPadula, Biba, Clark-Wilson and Chinese Wall. In the 'Rules' section of the chart, Bell-LaPadula is correctly listed as no read up, no write down. For the Biba model, it is also listed as no write up, no read down [which is incorrect]. I have found a lot of other mistakes as well. However, I am still using this book as the catalyst of my exam prep.
Please keep us updated on your progress. I wish you best of luck on the exam!
Darril Gibson's AIO book covers at least 85% of what you are likely to run into when you take the exam. Pay extra close attention to the StudiScope questions and how they are formatted and what sort of details they require. Unfortunately, the practice exams don't do a very good job in explaining the solutions to you but the format and the way you have to think them through stay the same for the real exam.
You definitely want to dig deeper on the subjects you are not as familiar with since they will take up a good bit of your time in the exam.
Hope this help. ^_^
Now all I need to figure out is what 15% this book is missing and where to get it
Once I'm done reading these last few chapters, will get started on reviewing everything again with the studiScope...
Wondering if I should go for the 109$ package or just one set of questions.
It's been awhile since I took a multiple choice cert. exam... I always enjoy the studying part, never really cared for that type of exam process.
Oh well.. can't have everything in life.
I will go over my mental notes in and see if I can remember the Domains that need to be revisited when compared to the AIO book and let you know. I don't think I can give specifics as per testing agreement restrictions but I think I can mention the domains that you'll need to identify a bit further when compared to the practice exam.
Know which domain is not "100% covered" (if such a thing is even possible in only 1 book) would guide me the right direction.
I mean pass or fail, I did learn from this book. So depending on how one looks at it, it's a win
I went for the AIO chirshz, seeing it seem part of most peoples collection (from what I read)
Not everyone used the official guide. I'll be honest too, I went for the less expensive book as well.
Best of luck on the SSCP. I too read the AIO, but also supplemented it with the Official Guide, StudISCope practice tests, CCCure paid version, and Ucertify. I also did watch the CBT Nuggets videos which as you mentioned are outdated, but it's a good break from reading. With all those materials I found the Official Guide to be very hard to read; one comment on this forum was made that since there are numerous authors contributing that the writing styles conflict which makes it difficult.
In my opinion the test questions on the SSCP are not hard to read. I'm surprised when I hear that they are, but everyone perceives things a bit different ... for me however, I thought that the style/format of the questions was straight forward.
ISC does a great job of formatting the questions. But if you compare them to another security exam, it's a completely different league in regards to content and complexity on the questions.
Security+ questions are fairly blunt when they ask a question, "What is the port used for HTTP?"
SSCP may present a slightly more elaborate scenario while still staying completely relevant to the answers presented.
Forum Admin at www.techexams.net
--
LinkedIn: www.linkedin.com/in/jamesdmurray
Twitter: www.twitter.com/jdmurray
You seem confidant saying that
So far the material is not hard, but then again reading and understanding a few books, PDFs etc. is not the same as an exam.
I never count my donkeys before they hatch... I'm going take the time it requires to pass. Eventually...
Thanks for all the feedback by the way guys.
If you have not done so already, you should check out JDMurray's blog regarding the SSCP/CISSP exam. He answers a lot of questions you might have about the exam.
The reason I still asked these questions out in the open is others may have different opinions/answers or just something
new to add...
Yes, I realize that. My point was/is that the English the questions are written in is not hard to read. In my opinion you can't really compare the questions for Security+ to the SSCP ... the SSCP is a lot more difficult in comparison.
You're right. I just wanted to help reiterate potential assumptions between the two or those made in the past. I know I was guilty of it for a time before I purchased the StudiScope materials and realized differently.
Seeing I never sat for the Security+ exam (I do have the book), good to know the questions won't be a "straight forward" as CompTIA tests.
I do remember my <whatever>+ exams, and I do recall the questions being "to the point" versus the Microsoft ones for example.
But still... good to know
Finished reading the AIO..
And just started with the StudiScope exams. Got all three, just did the first assessment.
Well, guess I found where that 15% is hiding. lol
Those questions are "odd looking".
Guess with a clearer head, and sleep i'll do better. Still don't regret the purchase.
If these practice exams are anything like the real deal, at least I'll be prepared for them...
Need to get back to my weak spots...
Thank you
Hi there. I used the Ucertify practice tests while preparing for the SSCP and I'm sorry to say that imo they are outdated, and do not accurately portray the types of questions you will be seeing on the actual exam. However, I purchased mine back in December 2011 so maybe they have updated them by now. The SSCP requires at least 1 year of experience in 1 of the CBK domains
Seems like the general consensus on this forum is the StudiScope prep exams are the closest to the real thing.
The AIO's questions, which should be the same as mine, are nothing compared to the StudiScope. They do however
reflect the material in the each chapter. So I would suggest you do some extra research and reading to cover all the
bases. When the book mentions a RFC, look it up. If it mentions an organization look that up too.
@YuckTheFankees
I remember someone on this forum mentioning he hadn't found any employers looking for this certification specifically.
But may not mean much. In my opinion seeing it's still a (ISC)2 certification, it will probably add value to your resume.
It can also be, I guess, a nice springboard towards CISSP if that is your goal.
As for me, so far not too bad. On to the active reading (taking notes while I read) part of run #2 on Gibson's AIO book.
Did the StudiScope exams, getting better but unfortunately after a 2 or 3 run at them I fear I'm
just remembering the correct answers rather than learning. So using the exams for research. Takings the ones
I missed more often and looking the theory up. Keeping the questions in Set#3 alone, seeing I've only done that
one once, my results more accurately depict my understanding of the material. Google, Wiki and some RFC look up
does help fill in the blanks which is good.
Still don't know when I'll be going for the exam. Computer based is opening everywhere in a few days time. Will need to see
where in my area it will be offered.
With a bit of luck, it will be available before you know it. Lots of good, solid advice on this board, so stick around!
Do keep us updated on your progress, and best of luck!
1. The most recent SSCP CBK (gold)
2. SSCP CBT Nuggets
3. StudiScope questions (all 3)
4. CCCure free CISSP/SSCP questions
I've listed my study materials in order from most valuable (to me) to least. I found that the SSCP CBK was actually a very good read and covered quite a bit of material. There were some particularly good chapters on malcode and encryption, which helped me get a much better understanding of each. The CBTNuggets series of videos was very easy to follow, and the instructor did a great job of keeping me engaged in the material. I found that the videos helped reinforce the material that I had read in the book. There was also some material covered that either was not covered in the book, or maybe I had missed it. The StudiScope questions were great in that they helped prepare me for the format of the questions that are in the actual exam. They train your mind to read and REREAD the question, because if you dont they could bite you in the butt. Also, the material in the StudiScope questions is from within the most recent SSCP CBK. Last but not least, the CCCure questions also helped prepare me for question format, however much of the material was quite outdated.
A.S Network Server Administration
M.S Information Security Management (expected 2014-2015)
Got a few really really odd-ball/left field questions, also had to review several questions after I completed (which is something I never do).
Still in the end, got the Congrats piece of paper on the way out. Guess I'll be getting the email soon about completing the procedure. Something about DNA and stool samples must be sent...
The book and studiscope are pretty dead on as far as material and exam prep. As mention, the AIO doesn't cover everything but filling in the blanks with some extra research does the trick.
One important note... Read the questions carefully. As in several times to make d*** sure you get it.
Happy I did this one and not CISSP. I never would've had the time to study for that one.