<div>
I am using shon harris, the cccure quiz &nbsp;and CISSP Comprehensive Review Note additionally to ISC2<br />
<a href="https://www.isc2.org/cissp-domains/default.aspx" rel="ugc">https://www.isc2.org/cissp-domains/default.aspx</a><br />
<a href="https://www.facebook.com/groups/1525346961013038/" rel="ugc">https://www.facebook.com/groups/1525346961013038/</a><br />
<a href="https://www.facebook.com/groups/InformationAudit/" rel="ugc">https://www.facebook.com/groups/InformationAudit/</a><br />
<a href="http://www.studynotesandtheory.com/cissp-study-plan-questions/#.VXxaKfm6c-V" rel="ugc">http://www.studynotesandtheory.com/cissp-study-plan-questions/#.VXxaKfm6c-V</a><br />
<a href="https://quizlet.com/subject/cissp/" rel="ugc">https://quizlet.com/subject/cissp/</a><br />
<a href="https://www.skillset.com/certifications/cissp" rel="ugc">https://www.skillset.com/certifications/cissp</a><br />
<a href="https://www.cccure.org/ftopict-8202.html" rel="ugc">https://www.cccure.org/ftopict-8202.html</a><br />
<a href="https://www.freepracticetests.org" rel="ugc">https://www.freepracticetests.org</a>
</div>


<div>
Going to class definitely helped and going through the guided book and sample from (ISC)2 will help alot. <br />
<br />
But the question really need to comes from able to make decision on the use case as it will have very close answer which principle guide what default risk assessed answer best fit to address it. It will not be straightforward and classes with trainer gives tips to newcomers like yourself how to better prep oneself and beef up since you also do not hold a security job as of now. <br />
<br />
Experience helps but in your case need further advices since you so not have the benefit for real life engagement and learning. See some quick tips<br />
<a href="https://cccure.training/m/articles/view/Tips-and-Tricks-on-how-to-become-a-CISSP" rel="ugc">https://cccure.training/m/articles/view/Tips-and-Tricks-on-how-to-become-a-CISSP</a><br />
<br />
Good to keep in mind the below guidance in faq
<blockquote>
If the examination isn't particularly difficult, why don't more people pass it?<br />
<br />
What makes the examination difficult is the expansive knowledge base it covers. It's difficult to develop expertise in all ten domains.<br />
<br />
Are the questions in the Study Guides really representative of examination questions?<br />
<br />
The study guides questions are good examples of the format and type of questions you would see on the exam but are not necessarily representative of the difficulty.<br />
<br />
The domains that are not commonly used in every day security management such as cryptography, system architecture, and physical security usually score the lowest.<br />
<br />
How current is the CISSP examination?<br />
<br />
Each year between 100 and 150 new questions are added to the question pool, many are based on new security technologies. You can expect to find questions on current technologies, practices and standards.<br />
<br />
How detailed are the questions, what depth of knowledge is being tested?<br />
<br />
The CISSP examination is designed to evaluate the ability of a security manager, engineer or architect to properly evaluate, select, deploy and assess security measures. A candidate should have a detailed enough knowledge of security designs, measures, vulnerabilities, etc. to successfully accomplish these tasks.
</blockquote>
</div>


<div>
thanks for the info. &nbsp;I don't want to ask this, but I'm going to anyway, but how can I get a study guide that is close to the questions that are supposed to be on the CISSP exam? &nbsp;I've been told that this test is a bit different in the way the questions are being asked. &nbsp;I'm not really looking for a cheat-sheet, but I've like something where the questions are going to be close to the questions on the exam. &nbsp;I hear the questions are super tricky/confusing.
</div>


<div>
They have also a good online CISSP resources <a href="https://www.cybrary.it/course/cissp/" rel="ugc">https://www.cybrary.it/course/cissp/</a>
</div>


<div>
The best and closest so far is to get those sample from isc2 sample question and answer though the price can be on the high side. 
<blockquote>
Official (ISC)²® Guide to the CISSP® CBK®, Fourth Edition<br />
Effective April 15, 2015, the CISSP exam will be based on a new exam blueprint. The Official (ISC)² Guide to the CISSP CBK, Fourth Edition provides a comprehensive study of the refreshed 8 domains. This book covers the most current topics in the information security industry today and includes numerous illustrated examples and practical exercises are included in this book to demonstrate concepts and real-life scenarios.
</blockquote>
<a href="https://www.isc2.org/official-isc2-textbooks.aspx" rel="ugc">https://www.isc2.org/official-isc2-textbooks.aspx</a>
</div>


<div>
You wont find similar/close to real exam questions
</div>


<div>
I only did the cccure practice exam and read shon harris book, you can try read so much but the exam question will never come from the question bank you study, try to think what ISC(2) want you answer the question instead you think which answer is correct
</div>


<div>
Practice more and give yourself more time and exposure. Regardless do note there is also criteria in term of the year of relevance in tje domains to be CISSP certified after getting a pass of the exam.
</div>


<div>
Practice,Practice,Practice<wbr /> ....<br />
In the exam, before you jump to an 'obvious' answer read the question again to double check what you are being asked for. Just remember there are the 'control' questions in there too so don't beat yourself up mentally if there are questions you have NO IDEA how to answer! again..<br />
Read the question.<br />
Read ALL the answers!<br />
Then read the question again!<br />
Be aware of &quot;negative&quot;-trick question <br />
Know crypto very well<br />
Good understanding about BCP and risk management.<br />
Do longer tests when comfortable, &nbsp;you need to get used to longer tests as the real one WILL take it out of you mentally! Once you have started longer tests keep doing them, you need to get used to it!
</div>


<div>
practice question DB was the main tool I used. The courses are useful as the teacher will give tips on how to interpret the questions and rule out some obvious wrong answers.
</div>


<div>
Do time yourself for each question so as to complete every 250 questions, do not miss out any one of them esp when &quot;stuck&quot; or spent too long on the question. As long as you take the risk measured and balanced and not being just follow the secure by default principle, the closest answer to align with business running will have a higher chance of getting it right. It is people centric and not just compliance (checklist) centric for decision making.
</div>


<div>
<div class="content wysiwyg-content">
I purchased some books for the CISSP test, please see below. &nbsp;According to some of the posts online, this may NOT be enough. &nbsp;I have little experience with CISSP knowledge at my current job. &nbsp;Wondering if going to class and paying 3-4k will be enough as well and what the difference will be if I study on my own versus going to class.<br />
<br />
<br />
books purchased:<br />
<br />
Shon Harris: &nbsp;CISSP All-in-One Exam Guide<br />
Shon Harris: &nbsp;CISSP Practice Exams, Third Edition<br />
CISSP (ISC)2 Certified Information Systems Security Professional Official Study Guide 7th Edition<br />
<br />
<br />
<br />
Your input and experience is greatly appreciated.
</div>
</div>


I purchased some books for the CISSP test, please see below.  According to some of the posts online, this may NOT be enough.  I have little experience with CISSP knowledge at my current job.  Wondering if going to class and paying 3-4k will be enough as well and what the difference will be if I study on my own versus going to class.


books purchased:

Shon Harris:  CISSP All-in-One Exam Guide
Shon Harris:  CISSP Practice Exams, Third Edition
CISSP (ISC)2 Certified Information Systems Security Professional Official Study Guide 7th Edition



Your input and experience is greatly appreciated.

CISSP study material

Security is the protection of information systems from theft or damage to the hardware, the software, and the information on them, as well as from disruption or misdirection of the services they provide. The main goal of security is protecting assets, and an asset is anything of value and worthy of protection.  Information Security is a discipline of protecting information assets from threats through safeguards to achieve the objectives of confidentiality, integrity, and availability or CIA for short. On the other hand, disclosure, alteration, and disruption (DAD) compromise the security objectives.

Security

Operating system security (OS security) is the process of ensuring OS integrity, confidentiality and availability. OS security refers to specified steps or measures used to protect the OS from threats, viruses, worms, malware or remote hacker intrusions. OS security encompasses all preventive-control techniques, which safeguard any computer assets capable of being stolen, edited or deleted if OS security is compromised, including authentication, passwords and threats to systems and programs.

OS Security

A vulnerability is a weakness which allows an attacker to reduce a system's information assurance. Vulnerability is the intersection of three elements: a system susceptibility or flaw, attacker access to the flaw, and attacker capability to exploit the flaw. To exploit a vulnerability, an attacker must have at least one applicable tool or technique that can connect to a system weakness, known as the attack surface. Vulnerability management is the cyclical practice of identifying, classifying, remediating, and mitigating vulnerabilities. Other vulnerabilities include security risks, security defects and constructs in programming languages that are difficult to use properly.