Hi all, I’d like to share my exam journey to help those who are currently preparing for it. First of all, I purchased the Peace of Mind (POM) voucher, and I highly recommend it to everyone. During my preparation, I felt mentally exhausted at some point, so I decided to take a step back and consider my approach. One thing that stood out from my exam experience was the number of technical questions, which was significantly higher than I had anticipated. I eventually passed the exam at 100 questions. Interestingly, there were still technical questions, but the overall balance seemed more focused on managerial and scenario-based questions. I also read the OSG cover to cover to identify my knowledge gaps. Although it was helpful, I wouldn't recommend going through the entire book unless you really need to. This is where I spent most of my preparation time without getting the best return on investment. Practice Questions – The Most Important Part of My Preparation Here are the resources I used, All of them added something valuable to my preparation. 1. Quantum Exams 2. Prep IQ Practice Questions (From Udemy) 3. Cissp Study Group & cissp.app 4. DestCert Mobile App A Few Final Tips - Get the Peace of Mind voucher. Knowing you have a second chance takes away a significant amount of psychological pressure during preparation. - Don't spend all your time reading books. Focus on practice questions, understanding the reasoning behind each answer, and identifying your weak areas. - When you finally sit in that exam chair, treat it as your only shot. Trust your instincts when answering scenario-based questions. Don't overthink things, and remember that understanding the mindset behind the questions is just as important as knowing the material. Good luck to everyone preparing for the exam! <3

A law firm signed a contract for an offshore vendor to label 50,000 client documents for AI training, starting Monday. The documents are classified Confidential and the handling standard bars external transfer. What should the security manager do FIRST? A. Require the vendor to sign a confidentiality agreement B. Have the data owner rule on reclassification or a documented exception C. Redact client identifiers before any transfer D. Encrypt the transfer and the vendor's storage (Explain your answer for more points in the comments!) Come back for the answer tomorrow, or study more now!

A retailer's data center lease ends in 90 days. Facilities found a cheaper building beside a river with one power feed and wants to sign in two weeks. No site assessment exists. What should the security architect do FIRST? A. Require a second power feed in the lease terms B. Assess the site for natural and physical threats before signing C. Design flood barriers and raised floors into the fit-out D. Transfer the flood and outage risk through insurance (Explain your answer for more points in the comments!) Come back for the answer tomorrow, or study more now!

A hospital audit finds nurses who moved to billing still hold clinical record access. HR never tells IT about role changes, and the CIO wants an identity governance platform bought this quarter. What should the security manager do FIRST? A. Buy the identity governance platform to automate access reviews B. Revoke clinical access from all billing staff today C. Define a mover process with HR as the authoritative source D. Recertify every department's access in a one-time review (Explain your answer for more points in the comments!) Come back for the answer tomorrow, or study more now!

A regional bank's outsourced SOC closes most alerts as false positives, and analysts now mute noisy rules to hit response targets before a regulator exam next month. What should the security operations manager do FIRST? A. Tune the noisy rules to cut false positives B. Assess which muted rules covered risks the bank must detect C. Add analyst headcount to meet targets without muting D. Reinstate every muted rule before the exam (Explain your answer for more points in the comments!) Come back for the answer tomorrow, or study more now!