Hi Eric and All,<br><br>Thanks a lot. I totally agree with Eric that your experience helps a lot in the Exam. The CISSP exam is designed in such a way that not only you need to understand the concept in theory but also how to apply in real life. Your experience will help you to understand the implementation of the theoretical concept. While answering most of the question of CISSP exam, i always refer to what i do in my job. Even answerign the physical question, i tried to compare it with the building i am working, which is a secure facility.<br>
<br>Regards,<br><br>Muhammad<br><br><br><br><br> <br><br><div class="gmail_quote">On Wed, Nov 18, 2009 at 5:24 AM, Eric Skiff <span dir="ltr"><<a href="mailto:eskiff@kinex.com">eskiff@kinex.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div link="blue" vlink="purple" lang="EN-US">
<div>
<p class="MsoNormal"><span style="font-size: 10pt;">Muhammad,
congratulations on passing the exam. Just in case anybody is intimidated
by all the preparation, let me share my experience. I read the Shon
Harris AIO 4<sup>th</sup> Edition book one time over a two month period
(roughly 20 pages/night), took Clement’s CISSP boot camp the week before
the exam, and then took/passed the test. The exam took about three hours
and when I finished I felt like there could have been about 20 questions I was
not sure about, but I figured I had enough to pass so I left rather than sit
and worry about those.</span></p>
<p class="MsoNormal"><span style="font-size: 10pt;"> </span></p>
<p class="MsoNormal"><span style="font-size: 10pt;">I
did not learn anything new in the boot camp. I do think a boot camp is a
good chance to get focused on taking the test and get rid of your day-to-day
distractions from your normal job. Please do not go to a boot camp and
expect to absorb enough to pass the test. This may work on Microsoft
certifications, but the volume of information in the CISSP CBK makes this
impossible. </span></p>
<p class="MsoNormal"><span style="font-size: 10pt;"> </span></p>
<p class="MsoNormal"><span style="font-size: 10pt;">I
believe if you work daily in IT/Information Security/Assurance, this test is
not very difficult and you don’t need to knock yourself out preparing
for
it. When I was in the boot camp, I felt like most of the class was there
to learn just how to pass the test versus gaining any knowledge, asking
questions, reviewing. This is very disappointing to me. Rather than
take 1,000,000 test questions, get yourself a virtualization platform, build
some virtual machines, and learn about hardening an operating system, build
an
IDS, setup a VPN, perform a network/security audit, etc. If you don’t
know how to do these things, then I don’t think you are ready for the
test and should be calling yourself a security professional. Sure, there
are a few domains that you can’t learn/study this way (physical security,
risk management), so read the Shon Harris AIO and maybe write up a practice
BIA, BDP, DRP, etc. to fill in the gaps in your knowledge. </span></p>
<p class="MsoNormal"><span style="font-size: 10pt;"> </span></p>
<p class="MsoNormal"><span style="font-size: 10pt;">Eric
Skiff</span></p>
<p class="MsoNormal"><span style="font-size: 10pt;">CISSP,
MCSE:Security, Security+, Network+</span></p>
<p class="MsoNormal"><span style="font-size: 10pt;"> </span></p>
<div style="border-style: solid none none; border-color: rgb(181, 196, 223) -moz-use-text-color -moz-use-text-color; border-width: 1pt medium medium; padding: 3pt 0in 0in;">
<p class="MsoNormal"><b><span style="font-size: 10pt;">From:</span></b><span style="font-size: 10pt;">
<a href="mailto:cisspstudy-bounces@cccure.org" target="_blank">cisspstudy-bounces@cccure.org</a> [mailto:<a href="mailto:cisspstudy-bounces@cccure.org" target="_blank">cisspstudy-bounces@cccure.org</a>] <b>On
Behalf Of </b>Muhammad Malik<div class="im"><br>
<b>Sent:</b> Monday, November 16, 2009 11:26 PM<br>
<b>To:</b> The CISSP Study Mailing list<br>
<b>Subject:</b> [Cisspstudy] CISSP Exam result</div></span></p>
</div>
<p class="MsoNormal"> </p>
<p class="MsoNormal" style="margin-bottom: 12pt;">Hi All,</p><div><div></div><div class="h5"><br>
<br>
Today i received an email from ISC2 saying that i have passed the CISSP exam. I
thought i might failed after the exam but it was good surprise. I am happy !!!!<br>
<br>
Anyway here is what i did for the CISSP preparation which might help those who
are pursuing for CISSP certification:<br>
<br>
- Study Shon Harris All-in-One 4th Edition. Read it thoroughly twice.<br>
- High level reading of ISC2 Official book - going quickly through chapters.<br>
- MP3 by Shon Harris<br>
<br>
For practice, i used <br>
- Offcourse cccure exam questions<br>
- Review Questions by Shon Harris - The MP3 and Quiz file by Shon Harris cost
me around $300 (<a href="http://www.logicalsecurity.com/store/cissp-mp3-and-quiz-file.html" target="_blank">http://www.logicalsecurity.com/store/cissp-mp3-and-quiz-file.html</a>)
but<br>
it helps me lot in understanding the concepts.<br>
<br>
My study plan:<br>
<br>
- Started with reading the Shon Harris All-in-One. I read this book thoroughly.
As soon as i finish the reading of the chapter .... i will try to do the
questions at the end of the chapter<br>
and also from cccure. <br>
- After finishing reading the All-in-One, i started doing the review questions
that comes with All-in-One and also i try to do the questions from cccure. I
manage to achieve the score<br>
of above 80 % on cccure.<br>
- Then i started doing the Quiz file by shon harris. I manage to finish most of
the domain with close to 80 %. Recommended passing score on these quiz files
are 80 %. After this<br>
i left with 2 weeks before my exam<br>
- I decided to read the All-in-One again. And i highly recommend anyone to go
through the material once u finish doing the quizes. <br>
- The day before the exam i have to travel to Sydney so i didn't study.<br>
<br>
<br>
The Exam:<br>
<br>
The exam was confusing. The question are set in such a way that its very hard
to say that i have done well on the exam. I thought i might failed and have
make plan when to re-take my exam.<br>
But lucky i passed. yahooooooo !!!!!!<br>
<br>
Regards,<br>
<br>
Dr. Muihammad Malik<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
</div></div>
</div>
</div>
<br><br>--------------------------------------------------------------------------------<br>This email and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this email, you are hereby notified any dissemination, distribution or copying of this email, and any attachments thereto, is strictly prohibited. If you receive this email in error please immediately notify me at (703) 995-4885 and permanently delete the original copy and any copy of any email, and any printout thereof.<br>
--------------------------------------------------------------------------------<br>
<br>_______________________________________________<br>
cisspstudy mailing list<br>
<a href="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</a><br>
<a href="http://cccure.org/mailman/listinfo/cisspstudy_cccure.org" target="_blank">http://cccure.org/mailman/listinfo/cisspstudy_cccure.org</a><br>
<br></blockquote></div><br>