Hi Everyone, I Passed the CISSP exam on Saturday. I attempted the exam in April 2024 but did not pass. Before now I used the following study materials - Official Study Guide (OSG) 9th edition, Sunflower, Luke Ahmed's How to think like a manager, ISC2 official exam prep and few you tube videos by Andrew Ramdayal. Preparing for this attempt, I joined the CISSP Skool Community where I gave me access to all the CISSP test questions and answers with explanation posted by Vincent and most importantly I joined the daily collaborative learning link where I was privileged to study alongside folks like Ed, Matthew, Ricardo, Pavithra, Aidah. Vishal, David, Babar, Emma and others using numerous question banks. I believed this helped me expand my learning and sharpening my exam mindset. I found this write up for my last minutes study - Cleared For Wealth | Break into defense contracting and build real wealth in IT as posted by Chiru. I really appreciate everyone that has helped me accomplish this milestone, especially to Vincent for running such a wonderful platform.

A new cloud provider wants to provide cloud services to consumers in its local region. The company is currently marketing its service models and trying to attract prospective customers. Which of the following SERVICE MODELS can the cloud provider NOT advertise under their service offering? A. Cloud storage drive B. Pre-configured virtual machines to upload source code for the developers C. Ready-to-use virtual machines with no operating system and applications D. Dedicated cloud service made available to companies

After a ransomware scare, a manufacturer's board funded zero trust. The network team wants an access broker deployed this quarter, but no inventory of applications, data flows or trust boundaries exists. What should the security manager do FIRST? A. Deploy the access broker for remote users first B. Map the applications, data flows and trust boundaries C. Segment the network by department before the rollout D. Pilot the access broker on executive devices (Explain your answer for more points in the comments!) Come back for the answer tomorrow, or study more now!

A regional bank's outsourced SOC closes most alerts as false positives, and analysts now mute noisy rules to hit response targets before a regulator exam next month. What should the security operations manager do FIRST? A. Tune the noisy rules to cut false positives B. Assess which muted rules covered risks the bank must detect C. Add analyst headcount to meet targets without muting D. Reinstate every muted rule before the exam (Explain your answer for more points in the comments!) Come back for the answer tomorrow, or study more now!

Cryptanalyst = Someone who studies and breaks codes and ciphers. Below pictures shows the the attack types and what Cryptanalyst has in procession to DEDUCE the KEY