Top products from r/cissp

Try this...

I started with the CISSP Study Guide, Second Edition: Eric Conrad, once I was done with that within 2 weeks, I read 11th hour by the same author. 11th hour was just a review/summary of the study guide so it was just to refresh what was read in CISSP Study Guide, Second Edition: Eric Conrad.
Any time I would get some free time in between while reading the two above mentioned books, if I go for a walk, drive to work or go for a run I would listen to Audio files from Shon Harris (I probably went twice through the entire Audio sessions (you can download here: http://www.mhprofessional.com/sites/CISSPExams/exam.php?id=AccessControl (see MP3 download under each domain) (I downloaded these and stored them on my phone so it was convenient for me to just hit play whenever I had some free time).
I also downloaded a CISSP App on google play that lets you take quizzes and study cards across all the domains (free app, so if you have an android device look for CISSP Flashcards by BH Inc.). I did these when I had some free time here and there.
I decided to get signed up with CCCure (https://www.freepracticetests.org/quiz/index.php?page=register ) for $50 you can take as many quizzes as you want for 6 months. This was well worth the money. I started taking practice exams about 50 questions per day. I selected (Study Mode, Hard, Closely related). I would do the 50 questions then the ones that I got wrong I would review within the engine as it had explanations.
I also the started reading Shon Harris All-in-One 6th edition (http://www.amazon.com/CISSP-All-One-Guide-Edition/dp/0071781749). Once I read that book (took me few weeks to finish it) (Boring book, but goo material, sometimes to deep, but good amount of information to prepare you for the exam), I installed the testing engine that came with the book called TotalTester, and started doing about 50 questions a day over all domains.
Throughout the day I would do 50 questions from TotalTester, and review the ones that I got wrong, and I would do 50 questions from CCCure, (but now I changed CCCure to Study Mode, PRO, closely related) and sometimes I would select un-attempted questions only, and then I would review the ones that I got wrong. For me was my goal to have 80%+ on the practice exams of 50 questions.
Now it was getting closer to the exam so I picked up AGAIN the CISSP Study guide from Erik Conrad the second edition, and would read a domain for a day or two, then read the summary ONLY from Shon Harris book for that domain (to refresh my memory even more), then take the total tester 50 questions just for that domain and review the questions that I got wrong, I would also do 50 questions on CCCure on that same domain and do the same review the wrong ones. If I was scoring 80-90% then I would move to the next domain and do the same.
Then the weekend before my test I reviewed again the 11th hour from Erik Conrad, and on Saturday I covered 5 domains, on Sunday I covered the next 5 domains to refresh my memory.
I personally though it was very important for me to keep taking practice exams every day so I felt like that every chance I got I would do exams of 50 questions between the two testing engines, sometimes resulting in covering 200+ questions a day. Some started being the same questions but that is I how I learn, by repetition and I would retain a lot that way.
Maybe I over did it and over prepared, but I just wanted to pass the exam…
The day before the exam I still felt unprepared, even thou I was scoring well on the practice exams and after all the material that I have covered. I guess its common human nature. So I tried my best to relax the day before my exam and tried to do something that would get my mind off the exam, go for walk, visit friends, go for coffee, watch a movie, and it is very important to STAY CALM the day before and while taking the exam.
When you get to the testing center, and start the exam, DO NOT RUSH… take your time and review each question carefully. Read all the answer choices for every question, you have 6 hours there…For questions that you are not sure of the answer mark them for review, and review them later once you reach 250th question.
For me the worse feeling was after I finished the exam and when it said to go and get my printout that would say if I passed or not. I felt horrible as I thought I did badly on the exam. The questions were tough and sometimes while you could rule out two answers as a definite NO, there would be two choices that are so close of being right. However, receiving the piece of paper, when I looked at it, it said Congratulations, …you have passed…I was happy to see that.
So remember when answering questions and making your decision on an answer, Human life is always #1. Standards, policies, and regulations always precede everything else. Think as a CEO and not a Sec Admin when it comes to $$$$. Read the question carefully as they will tell you, a System Admin, A security officer, a senior manager, make sure that when you see those in the question you try to think as that person and what would be the best for the company.
Know the formulas for ALE and SLE and study hard the BCP, BIA and DR. I also thought that I needed to know the most in Crypto so I spend a large amount of time covering cryptography as it was one of my weakest domains. I also watched this 90 minute video that kind a helped a bit as well: http://resources.infosecinstitute.com/mini-course/cryptography-cissp-training/

Congratulations!.

​

Well done and thanks for sharing.

​

Just a quick question, you have said '- I bought the ISC2 test questions book' do you mean this book?

​

Thanks.

It's a good book, it's also setup around the 10 domains, pre 2015 test. You should also get something newer Cybex book
http://www.amazon.com/Certified-Information-Security-Professional-Official/dp/1119042712

Also, check out the free training course at cybrary.it, it's very good.

I bought this one along with the associated question book, is this the Sybex book you talk about?

https://www.amazon.com/CISSP-Certified-Information-Security-Professional/dp/1119475937/ref=dp_ob_title_bk

Also got the 11th Hour, which is a great summary.

And of course Kelly's video's :)

PS. i'm a light weight, a double shot of coffee is enough to get me going ;)

Hi, Thanks for sharing in details.
are these two items same,
Sybex practice test bank 4x250 question exams And Sybex Practice text book? https://www.amazon.com/CISSP-Official-ISC-Practice-Tests/dp/1119252288.
if not, how can I get the 4x250 questions?
Thanks

I used a local class, as the in person instruction helped me out a lot. With that, I also recommend Kelly Handerhan's Cybrary course, which is free online.

​

Also, if you can get the Official Practice Tests, https://www.amazon.com/CISSP-Official-ISC-Practice-Tests/dp/1119475929/ref=dp_rm_title_1 and Study Guide, https://www.amazon.com/Certified-Information-Security-Professional-Official/dp/1119475937/ref=dp_rm_title_0

​

Those also help out a lot.

Congrats!!!

What do you mean by ' the Official isc2 practice test book '? Is it the Sybex one? https://www.amazon.com/CISSP-Official-ISC-Practice-Tests/dp/1119475929

​

Thank you

Ah, yes. Those aren't the same. This is the most updated, recent official exam book that includes the practice exams:

https://www.amazon.com/gp/product/1119523265/ref=ppx_yo_dt_b_asin_title_o07_s01?ie=UTF8&psc=1

The book comes with questions as well, but not very good ones in relation to the exam. It also has online flashcards. The practice exam book can be activated online, and all questions are available online. That book has everything that is covered in the test.

The other book I used was this one, but more straight to the point, but doesn't cover every single detail like the Sybex:
https://www.amazon.com/CISSP-Study-Guide-Eric-Conrad/dp/0128024372/ref=sr_1_1?keywords=cissp+study+guide+third+edition&qid=1555615018&s=gateway&sr=8-1

congrats !

​

can you confirm that those are the books you were using:

https://www.amazon.com/Certified-Information-Security-Professional-Official/dp/1119523265/ref=sr_1_1?keywords=sybex+cissp&qid=1557068330&s=gateway&sr=8-1

​

https://www.amazon.com/CISSP-Study-Guide-Eric-Conrad/dp/0128024372/ref=sr_1_2?crid=3EHIXX8M9ICO3&keywords=11th+hour+cissp&qid=1557068417&s=gateway&sprefix=11th+ho%2Caps%2C391&sr=8-2

id put good money on this one

it comes with 100 practice ?s from each domain along with two full exams and is well reviewed here as being the closest in format to the actual exam

Thanks for the heads-up. Do you think it's worth it to get the book and practice test combo or just the book?

Experience only gets you so far on the CISSP, as plenty of smart people with loads of experience fail, because they don't understand how to take an exam or the boundaries of it. You can't cram for the CISSP, and need to make sure that you study evenly over time before the exam, as there is a lot of range in topics, but not much depth. Here is how I passed:

I used Shon Harris's CISSP All-In-One:

https://www.amazon.com/CISSP-All-One-Guide-Eighth/dp/1260142655/ref=sr_1_1?crid=NGMZ8UWXWDNQ&keywords=cissp+all-in-one+exam+guide%2C+eighth+edition+by+shon+harris&qid=1570840219&sprefix=shon+harris+all+%2Caps%2C234&sr=8-1

In the back of the book there is a testing engine online hosted by the publisher. I did that over and over (after reading the book) until I knew the answers like second nature. When doing the testing engine, it is important to know why answers are wrong as much as knowing the right answer.

Please see the following video, where I used the same method to study and pass the CISSP and multiple AWS exams:

https://youtu.be/wod92WIn92E

​

My background: been a CISSP since 2012, and have personally helped 2 people study and pass this exam.

Hope this helps!

That is because it is the old version.

To be fair that is the one I studied since I studied after the current test was released but before the new edition and I passed first try so maybe it's fine?

​

EDIT: NOPE. 8th Edition is $41, which is $3 cheaper.

​

https://smile.amazon.com/CISSP-All-One-Guide-Eighth/dp/1260142655/ref=sr_1_1_sspa?keywords=cissp+all+in+one&qid=1555433292&s=gateway&sr=8-1-spons&psc=1

Shon Harris's new book, updated by Fernando Maymi is an excellent study and certification prep. We use this book when delivering training to our DoD clients.

https://www.amazon.com/CISSP-All-One-Guide-Seventh/dp/0071849270/ref=sr_1_1?ie=UTF8&qid=1484067461&sr=8-1&keywords=cissp+shon+harris

Interesting....Here is Link to amazon pre-order page isc2 cissp reference book.

My question is what’s the difference between this reference book and the 8th edition study guide, what’s better for exam?

The info is good but it is a pricey and painful read. Most may find the juice isn't worth the squeeze on this. It is a great sleep aid though. The paperback volumes together is around 9 pounds.

https://www.amazon.com/Computer-Security-Handbook-Seymour-Bosworth/dp/1118127064

> https://www.amazon.com/Certified-Information-Security-Professional-Official/dp/1119042712

That's the official study guide for the exam. The CBK is the Common Body of Knowledge which is intended to teach you the concepts.

I'm studying and both are dreadfully boring. I'd start with something like the CBT Nuggets videos, which will introduce you to the topics in a fun and engaging manner - then hit the dry book work hard when you feel you're ready.

If you start with the official CBK or study guide, it might turn you off. It's a lot of dry reading.

Hello,

Thanks for the reply. What I meant is what is the difference between Sybex and this book https://www.amazon.com/Official-Guide-CISSP-Fourth-Press-ebook/dp/B00W4YSL0Q/ ? Are both same?

Regards,

Sop

Which one did you think was better?



1000 online practice exam questions that come with the Official Study Guide 7th Edition - http://sybextestbanks.wiley.com/course/start/id/102

vs. CISSP Official (ISC)2 Practice Tests - Chapple, Seidl Amazon

I passed my exam with help from the CISSP Mentor Program and following along with their talks with the Eric Conrad study guide.

Sure. Get it from here. https://www.amazon.com/Certified-Information-Security-Professional-Official/dp/1119475937/ref=sr_1_4?crid=2N0VRVPHLM0X&keywords=sybex+cissp&qid=1574951835&sprefix=Sybex+cissp%2Caps%2C219&sr=8-4

CCSP (ISC)2 Certified Cloud Security Professional Official Study Guide https://www.amazon.com/dp/1119277418/ref=cm_sw_r_cp_api_PovaCbDMHRFK2

These two subjects are very well explained by the CISSP All in One (created by Shon Harris)

https://www.amazon.com/CISSP-All-One-Guide-Seventh/dp/0071849270/ref=pd_sbs_14_t_0?_encoding=UTF8&psc=1&refRID=4D3GRA6EEWEVVRQ0F39J

A new version of the CISSP CBK is out. I suggest buying that book as well. Lots of updated content.

The Official (ISC)2 Guide to the CISSP CBK Reference https://www.amazon.com/dp/1119423341/ref=cm_sw_r_cp_apa_i_-ezEDbXBTBHFR

"Official ISC(2) Training Guide, CISSP CBK, Participant's Guide", which doesn't appear to be on Amazon, but this is probably close.... they gave me a .pdf only version of it. The cover is the same except my pdf says "Participants Guide" under the CISSP logo

https://www.amazon.com/dp/B00W4YSL0Q/

I agree - this is one course where going into it with no preparatory reading will leave you scratching your head throughout the tutorial period. The course is so broad that it's better to use the tutorial time to ask clarification questions about material you half-understand than to expect to be taught the material from scratch.

If you've been given the CBK breezeblock in advance, read it (or at least skim the lot).

If you haven't, then invest in a study guide. I love the Sybex one. YMMV.

But don't go in cold. You will regret it.

I used the Shon Harris Practice Exams

https://www.amazon.com/CISSP-Study-Guide-Third-Conrad/dp/0128024372/ref=sr_1_1?ie=UTF8&qid=1506619438&sr=8-1&keywords=eric+conrad+cissp

One more point, we are now involved in the Sybex series of study guides (SSCP and CISSP right now). These are more akin to our standards.

CISSP Study Guide

SSCP Study Guide

For "Shon Harris Q n A" are you referring to on online practice exam or the book "CISSP Practice Exams, Fourth Edition" by Shon Harris?

https://www.amazon.com/CISSP-Practice-Exams-Fourth-Harris/dp/1259585964

ISBN: 978-0-12-811248-9
https://www.amazon.com/Eleventh-Hour-CISSP%C2%AE-Study-Guide/dp/0128112484/ref=sr_1_2?keywords=ISBN%3A+978-0-12-811248-9&qid=1563081725&s=gateway&sr=8-2

There's also this https://www.amazon.com/CISSP-Official-ISC-Practice-Tests/dp/1119252288/ref=dp_rm_title_0

https://www.amazon.com/CISSP-Study-Guide-Third-Conrad/dp/0128024372

https://www.amazon.com/dp/1119278635

CISSP Study Guide https://www.amazon.com/dp/0128024372/ref=cm_sw_r_cp_api_i_5GgGDb2NADS0W

So by buying the following :

https://www.amazon.co.uk/Certified-Information-Security-Professional-Official/dp/1119523265/ref=sr_1_1?ie=UTF8&qid=1538646513&sr=8-1&keywords=cissp

You get access to an online Sybex exam tool by registering your books. Directions are provided on the back side of the books.

thats this guy right?
https://www.amazon.com/CISSP-Official-ISC-Practice-Tests/dp/1119252288/ref=sr_1_1?ie=UTF8&qid=1498778594&sr=8-1&keywords=cissp+official+test+book

the testing app on my phone is pulled from this book i believe

I took the exam 4-5 years ago, and the transcenders were a help. The exam was in fact a bitch. Most of the questions were
A: not right
B: not right for this particular question
C: Right
D: more right.
and so on.
I recommend the transcenders, and any of the other testing questions out there.
I also found this book helpful:https://www.amazon.com/Eleventh-Hour-CISSP-Third-Study/dp/0128112484/ref=sr_1_1?ie=UTF8&qid=1499282710&sr=8-1&keywords=11th+hour+cissp

Boils down the stuff I had been reading about into almost an outline level for last minute review.

No, this is what I am talking about.

https://www.amazon.com/CISSP-Official-ISC-Practice-Tests/dp/1119252288/ref=sr_1_2?ie=UTF8&qid=1505313632&sr=8-2&keywords=isc2+cissp+test

cccure.org is considered by most to be the defacto question bank and the best way to prepare. I have found that the Sybex Official Practice tests online are just as good if not better and will save you a few bucks if that's a problem. The one thing I WILL say bad about it is at times it lags very bad.
https://www.amazon.com/CISSP-Official-ISC-Practice-Tests/dp/1119252288/ref=sr_1_2?ie=UTF8&qid=1481206384&sr=8-2&keywords=sybex+cissp

Sybex actually has a newer CISSP book that covers the new domain format. http://www.amazon.com/Certified-Information-Security-Professional-Official/dp/1119042712/ref=sr_1_1?ie=UTF8&qid=1458704710&sr=8-1&keywords=sybex+cissp . I found the Shon Harris All-in_one book very difficult to read cover to cover. I used it for reference.