I started in Sept 2024 Exam Date Dec 7 2024 Completed in 1h 30m Question 110? My exam was mostly the wordy questions, maybe 5 one line questions. I was between projects and felt this would be a good time to get this off of my plate. I had no specific routine, just used something on my list. Now I would say that I spent most of my time in practice questions/exams. I felt that was a way to weed out what I knew. If I was really weak in an area I would use both books and freshen up my knowledge. I did a lot of QOD (Question of the day) or a quick 10 in the apps, this could be anytime when I first got up, before bed, if I woke up in the middle of the night, waiting at a doctors office etc. If I began to memorize the answers to questions I would move to another app, or in the case of LearnZapp I would go through all of the questions in 1 domain. I noticed as I was doing questions, my average time was in the 17 seconds range sometimes less, but my score was not changing very much. So I devised my own hack to get a feeling for time. I set my phone to 1 minute 20 seconds (3 hours divided by 125 questions = 1 m 26 s) The I would take a Quick 10 or maybe 30 questions, watching the clock, even if I knew the answer at least let a minute go by to "feel" how much time was left. Android Apps CISSP Test 3.6.0 (Free Version) 20% of the questions Pocket Prep 3.19.0 (2 Months of Premium) to access 1000 question CISSP - CCSP - SSCP - ISC2 Official 25.2.3 (Free Version) LearnZapp Online Classes (Buy when on sale) Udemy - CISSP Certification - Thor Pedersen - Watched a few times, then just listened to like a podcast Lynda.com - ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep - Mike Chapple - Free through local library watched about 1/3 Secbay Bootcamp - group buy - these were my last 5 days of studying, as my exam was Saturday. YouTube Pete Zerger - Inside Cloud and Security - https://www.youtube.com/watch?v=_nyZhYnCNLA&t=4096s

What is the primary advantage of using elliptic curve cryptography (ECC) compared to RSA for key exchange? A) ECC requires shorter key lengths for equivalent security strength, reducing computational overhead. B) ECC provides stronger key management features and key lifecycle policies. C) ECC is not vulnerable to brute force attacks due to its unique key structure. D) ECC eliminates the need for digital signatures in key exchange protocols.

When assessing the audit capability of an application, which of the following activities is MOST important? A. Identify procedures to investigate suspicious activity. B. Determine if audit records contain sufficient information. C. Verify if sufficient storage is allocated for audit records. D. Review security plan for actions to be taken in the event of audit failure.

Which of the following security principles ensures that the design of a system limits the potential for failure to minimize the impact on the overall system? A) Fail-safe defaults B) Economy of mechanism C) Separation of privilege D) Open design

In the context of secure system design, what is the primary purpose of implementing a trusted computing base (TCB)? A) To ensure a separation of duties in all operational activities. B) To provide mechanisms for secure communication between network nodes. C) To enforce a consistent and reliable security policy across the system. D) To enable the use of multifactor authentication for system access.