[Cisspstudy] CISSP Exam result

Tue Nov 17 13:29:31 EST 2009

Thank you Eric for adding the work-day-world experience into the CISSP CBK.

This isn't just a paper chase.

From: cisspstudy-bounces at cccure.org [mailto:cisspstudy-bounces at cccure.org] On Behalf Of Eric Skiff
Sent: Tuesday, November 17, 2009 1:25 PM
To: The CISSP Study Mailing list
Subject: Re: [Cisspstudy] CISSP Exam result

Muhammad, congratulations on passing the exam.  Just in case anybody is intimidated by all the preparation, let me share my experience.  I read the Shon Harris AIO 4th Edition book one time over a two month period (roughly 20 pages/night), took Clement's CISSP boot camp the week before the exam, and then took/passed the test.  The exam took about three hours and when I finished I felt like there could have been about 20 questions I was not sure about, but I figured I had enough to pass so I left rather than sit and worry about those.

I did not learn anything new in the boot camp.  I do think a boot camp is a good chance to get focused on taking the test and get rid of your day-to-day distractions from your normal job.  Please do not go to a boot camp and expect to absorb enough to pass the test.  This may work on Microsoft certifications, but the volume of information in the CISSP CBK makes this impossible.

I believe if you work daily in IT/Information Security/Assurance, this test is not very difficult and you don't need to knock yourself out preparing for it.  When I was in the boot camp, I felt like most of the class was there to learn just how to pass the test versus gaining any knowledge, asking questions, reviewing.  This is very disappointing to me.  Rather than take 1,000,000 test questions, get yourself a virtualization platform, build some virtual machines, and learn about hardening an operating system, build an IDS, setup a VPN, perform a network/security audit, etc.  If you don't know how to do these things, then I don't think you are ready for the test and should be calling yourself a security professional.  Sure, there are a few domains that you can't learn/study this way (physical security, risk management), so read the Shon Harris AIO and maybe write up a practice BIA, BDP, DRP, etc. to fill in the gaps in your knowledge.

Eric Skiff
CISSP, MCSE:Security, Security+, Network+

From: cisspstudy-bounces at cccure.org [mailto:cisspstudy-bounces at cccure.org] On Behalf Of Muhammad Malik
Sent: Monday, November 16, 2009 11:26 PM
To: The CISSP Study Mailing list
Subject: [Cisspstudy] CISSP Exam result

Hi All,

Today i received an email from ISC2 saying that i have passed the CISSP exam. I thought i might failed after the exam but it was good surprise. I am happy !!!!

Anyway here is what i did for the CISSP preparation which might help those who are pursuing for CISSP certification:

- Study Shon Harris All-in-One 4th Edition. Read it thoroughly twice.
- High level reading of ISC2 Official book - going quickly through chapters.
- MP3 by Shon Harris

For practice, i used
- Offcourse cccure exam questions
- Review Questions by Shon Harris - The MP3 and Quiz file by Shon Harris cost me around $300 (http://www.logicalsecurity.com/store/cissp-mp3-and-quiz-file.html) but
it helps me lot in understanding the concepts.

My study plan:

- Started with reading the Shon Harris All-in-One. I read this book thoroughly. As soon as i finish the reading of the chapter .... i will try to do the questions at the end of the chapter
  and also from cccure.
- After finishing reading the All-in-One, i started doing the review questions that comes with All-in-One and also i try to do the questions from cccure. I manage to achieve the score
of above 80 % on cccure.
- Then i started doing the Quiz file by shon harris. I manage to finish most of the domain with close to 80 %. Recommended passing score on these quiz files are 80 %. After this
i left with 2 weeks before my exam
- I decided to read the All-in-One again. And i highly recommend anyone to go through the material once u finish doing the quizes.
- The day before the exam i have to travel to Sydney so i didn't study.

The Exam:

The exam was confusing. The question are set in such a way that its very hard to say that i have done well on the exam. I thought i might failed and have make plan when to re-take my exam.
But lucky i passed. yahooooooo !!!!!!

Regards,

Dr. Muihammad Malik

--------------------------------------------------------------------------------
This email and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this email, you are hereby notified any dissemination, distribution or copying of this email, and any attachments thereto, is strictly prohibited. If you receive this email in error please immediately notify me at (703) 995-4885 and permanently delete the original copy and any copy of any email, and any printout thereof.
--------------------------------------------------------------------------------
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cccure.org/pipermail/cisspstudy_cccure.org/attachments/20091117/b0424ae2/attachment-0001.html>