Passed CISSP today 21 July
OK, after all the emotions have settled, I decided to give my contribution to this great community.
Preparation time: Roughly 5 months, with some gaps to sort out family matters.
Used resources:
Shon Harris AiO 6th edition
Eric Conrad 2nd edition
Transcender questions
Shon Harris questions from AiO 6th edition CD (with totaltester engine)
MG Hill questions
ISC2 workshops (free) during a local exhibition.
Tried but abandoned: Cybrary, CISSP for Dummies, Official CBK, Skillset.
Cybrary is great, but as a first-time introducing resource. When I found out about it, I already have read Erik Conrad from cover to cover once.
Background: 11 years as system and network engineer (Telco), 1 year as a pentester, 2 years in Governance and Risk Management
Study methodology:
Simply reading the books proved to be inefficient. By mid-April I was still not ready (got consistently humiliated by practice exams) and I decided to not take the exam, prepare for the new CBK and find a new approach. I have very hard time concentrating while reading (to the extend of worrying that I might be a case of ADD). Even Conrad was boring for me, Shon Harris was even harder in this regard, CBK – absolutely impossible. Following a post from someone about a flashcards software named Anki, I discovered a free web service named Quizlet that does roughly the same. From then on my study involved “hunting” concepts and terminology that I was not familiar with and constructing my own “body of knowledge” in the form of quizlet study sets. Then I would use the quizlet engine to generate different types of flashcards and multiple-choice tests and I would go through them from the beginning every now and then to refresh what I have studied so far. The multiple-choice generation is really amazing, some of the questions were actually worthy of being on the exam. The quizlet engine is smart enough to populate the “wrong” choices from other similarly looking words in the same study set. This approach helped me immensely to remember all the terminology that I was unfamiliar with. After going through all the stuff I started with practice questions and had fairly good results (around 80% and going up).
Time management is critical in both preparation and the exam. I took advantage of the fact that I had several months of living abroad alone, without my family. During the working week I would spend roughly 2 hours in study, 6-8 hours during the weekend days. I took some days off work, which combined with holidays and weekends gave me full 7 days of doing nothing but preparing for the exam right before my date.
I scheduled my daily routine in a way that would make by body and mind used to what I was going to experience during the exam day. Waking up and going to bed at the same time, do practice tests during the exam time (and breaks also), having breakfast and lunch – everything was scheduled to make the exam day experience familiar and feel just like another day.
I paid special attention to keeping myself well hydrated both during the study and the exam. This was something that I have neglected throughout my entire life and I believe it was of a huge benefit to finally pay the proper attention to it. Your brain has its own physiology, it needs to be well hydrated and fed in order to do its job (memorizing and thinking) properly.
Of course I couldn't sleep properly the night before the exam, but hydration helps with that too. Some exam questions scared me as they looked completely out of the picture, but at some point I recalled that 25 would be “fake” or “research” questions. I was able to recognize several that didn't make any sense and were most likely in this group. I used the standard approach of two passes, marking the questions that I wanted to have a second thought later. Marked maybe 20, changed 3-4 of them and ended the exam with 40 minutes left on the clock. I was almost sure that I failed, as the exam seemed to cherry-pick my weak areas, but the printout said “Pass”. Yay!
A big thank you to everyone who wished me luck and helped me when I didn't believe in myself.
For all future test-takers – you can do it! It is hard but achievable and the satisfaction of succeeding is like nothing else. Best of luck to all of you!
God bless