Hi all, I’d like to share my exam journey to help those who are currently preparing for it. First of all, I purchased the Peace of Mind (POM) voucher, and I highly recommend it to everyone. During my preparation, I felt mentally exhausted at some point, so I decided to take a step back and consider my approach. One thing that stood out from my exam experience was the number of technical questions, which was significantly higher than I had anticipated. I eventually passed the exam at 100 questions. Interestingly, there were still technical questions, but the overall balance seemed more focused on managerial and scenario-based questions. I also read the OSG cover to cover to identify my knowledge gaps. Although it was helpful, I wouldn't recommend going through the entire book unless you really need to. This is where I spent most of my preparation time without getting the best return on investment. Practice Questions – The Most Important Part of My Preparation Here are the resources I used, All of them added something valuable to my preparation. 1. Quantum Exams 2. Prep IQ Practice Questions (From Udemy) 3. Cissp Study Group & cissp.app 4. DestCert Mobile App A Few Final Tips - Get the Peace of Mind voucher. Knowing you have a second chance takes away a significant amount of psychological pressure during preparation. - Don't spend all your time reading books. Focus on practice questions, understanding the reasoning behind each answer, and identifying your weak areas. - When you finally sit in that exam chair, treat it as your only shot. Trust your instincts when answering scenario-based questions. Don't overthink things, and remember that understanding the mindset behind the questions is just as important as knowing the material. Good luck to everyone preparing for the exam! <3

Refer a Friend to the CISSP and You Both Earn $50 CISSP holders can now earn rewards while helping to close the cybersecurity workforce gap by referring friends to the CISSP certification. All you need to do is share the referral application form and your ISC2 member ID with a potential CISSP (this may be a friend, a work colleague or anyone who you think would benefit from CISSP). Once they pass the CISSP exam and become an ISC2 member (they need to complete these steps within 6 months), you’ll both receive a $50 online gift voucher of your choice. https://www.isc2.org/members/referral-program?utm_source=isc2list&utm_medium=email-am&utm_campaign=GBL-MBR-Referral&utm_term=promo-email-3&utm_content=referral&utm_source=sfmc&utm_term=&utm_content=173127&utm_id=33c73e7c-1325-4cd8-bcfe-80c58593ff39&sfmc_activityid=53e7cb26-c53d-4e0e-86fc-5aedc5b1c8da&utm_medium=email

After a ransomware scare, a manufacturer's board funded zero trust. The network team wants an access broker deployed this quarter, but no inventory of applications, data flows or trust boundaries exists. What should the security manager do FIRST? A. Deploy the access broker for remote users first B. Map the applications, data flows and trust boundaries C. Segment the network by department before the rollout D. Pilot the access broker on executive devices (Explain your answer for more points in the comments!) Come back for the answer tomorrow, or study more now!

Auditors found 400 active accounts for contractors whose engagements ended. Forty agencies supply staff, nobody owns their access lifecycle, and the business wants contractor single sign-on next quarter. What should the security manager do FIRST? A. Disable the 400 accounts and notify the agencies B. Assign an owner and define the contractor access lifecycle C. Extend single sign-on with mandatory MFA to contractors D. Schedule quarterly access reviews for contractors (Explain your answer for more points in the comments!) Come back for the answer tomorrow, or study more now!