I took and passed the CISSP exam yesterday, Friday May 16th, with 17 minutes to spare! I didn't take this exam alone. I walked into the exam hall with a virtual tribe of individuals lifting me on their shoulders. Their confidence in me, dispelled all of my fears and anxiety. Sitting in front of the examination computer, the questions seemed clear to me, even if my fundamentals may have been a bit fuzzy. I would not have passed the exam without the support of this Skool platform, our CISSP Community Study Group (CSG) and the personal connections that I have made via the study groups. Here is my attempt to thank everyone. If I missed someone, please attribute it to my excitement. @Christopher Schneider for introducing me to this platform, @Rebecca Kirk for suggesting that we form a Community Study Group(CSG), @Vincent Primiani for providing the platform, @Fouad Ahmed for motivational support and lots of great documents, @Shane Symons for supporting the group, our CSG members: @Annette Corona @Timilehin Ajibade @Maurice Lightfoot @Taiye Olorundare @Stan Lyubarskiy @Tahjar R @Mario Rasathurai @Reginald Johnson JR, @Randy Rempel. Special thanks to @Venkat Ayyer @Babur Farooq, @Peter Marie, who passed but continue to support the CSG and @Jolian Stephens @Martín Figueroa for the late night Quantum Question reviews. There are so many more..... My main resources: Original Study Guide: Nineth and Tenth Editions (Wiley Test Bank too)

I passed the CISSP this Monday! I relied on several resources that have been highly recommended by many in the community. Here’s a list of what I used: - LearnZapp - ISC2 Official Exam Prep App - Cert Mike - CISSP: Certified Information Systems Security Professional 2024 - CISSP Certification Prep - Pete Zerger CISSP Exam Cram 2024 - CISSP Prep Coffee Shots - 50 CISSP Practice Questions. Master the CISSP Mindset - How to PASS exam Certified Information Systems Security Professional CISSP in 12 hours Additionally, I utilized the following books as well: - The Official ISC2 CISSP CBK Reference - Official ISC2 CISSP Study Guide - Official CISSP Practice Tests, 4th Edition - CISSP All-in-One Exam Guide, Ninth Edition - Destination CISSP However, none of these courses, bootcamps, or videos directly covered the content that I saw in the examination. The CBK/OSG and LearnZapp were much more helpful. The most beneficial tool for me was using something like ChatGPT to understand concepts better and analyze questions. It really helped me understand why certain answers were better than others. Wishing all my fellow CISSP aspirants the best of luck on your journey! You’ve all got this!

Question:An organization has decided to upgrade its data center with new encryption modules to support FIPS 140-3 compliance. As the lead security architect, you must ensure that the hardware security modules (HSMs) meet this requirement. The vendor offers two types: one that is FIPS 140-2 validated and another that is currently undergoing 140-3 testing. What is the MOST appropriate decision? A. Select the FIPS 140-2 validated HSM, as it is already compliant. B. Choose the 140-3 model to future-proof the environment. C. Wait for the 140-3 model to be validated before making a decision. D. Implement the 140-2 version temporarily and plan to migrate to 140-3.

You are reviewing network architecture for a new financial services platform. It must support secure communication between cloud-hosted microservices and on-prem systems. The system should prevent eavesdropping and man-in-the-middle (MITM) attacks. The services operate across multiple cloud providers. Which of the following provides the MOST effective solution? A. Implement VPN tunnels between all cloud and on-prem endpoints. B. Use SSL/TLS with mutual authentication for all API communications. C. Set up a dedicated leased line between cloud and on-prem environments. D. Rely on the cloud providers’ internal security for all communications.

So I wrote my exam on Tuesday in NZ and thought I failed as I only answered 95 questions. Then received my notice to say I passed. This was a great relief as, based on what I understood, is if you answer less than 100 questions, it would indicate you failed. So if anyone else who does not get to 100 questions, do not panic until you have received your confirmation 😁.