r/cissp • • Sep 06 '25

Just answer the question

70 Upvotes

This is not meant towards anyone specifically, and it’s quite common. I am also seeing it more and more lately. Hopefully this helps some of you.

When studying and ESPECIALLY on the real exam, just answer what the question is asking.

If the question wants First, it’s looking for the first phase of a flow.

If it’s asking NEXT, it is putting you inside of a flow, figure out where you are and pick the answer that is the next step.

Neither of the two just mentioned may be what’s BEST for security. Again the BEST solution isn’t always the best answer.

If a question is asking for the BEST. This is where we pick the answer that best ANSWERS THE QUESTION, it could be technical, could be administrative, which is why…

Just answer the question.

Edit: for “best”, even with these you want to pick the best answer that answers the question, there may be “better” technological solutions, but more security isn’t always best. If a question wants best cost-saving solution, we may not want to pick most expensive option even if it’s technically “better”. Hope this makes sense

Edit 2: For this exam, you're stepping into ISC2's perfect little world and the way you typically do things could very well differ from what they expect. Just learn and answer as expected for the exam and then forget it and get back to real life. Trying to argue otherwise is a no-win battle...100% of the time.


r/cissp • • May 14 '25

Study Material CISSP Study Results 20250514 Study Materials

39 Upvotes

The companion email for these resources are here:

https://www.reddit.com/r/cissp/comments/1kmc9jv/cissp_study_results_20250514/


r/cissp • • 4h ago

Success Story Passed CISSP at Q100 (non-native English speaker) - what worked and what I'd change

9 Upvotes

Background

17 years in IT, with ISC2 CC and Security+ already behind me. I'm Spanish and took the exam in English. Screen went black at 100, and I passed. Here's what I learned.

Study routine (3-4 months)

I studied every single day: some days 4 solid hours, others just 1, squeezing questions into my commute, bathroom breaks 🙈 and gym time.

Pick your sources early and stick with them.

Don't keep jumping between resources. If you need to invest some time upfront choosing your materials, do it: it's time well spent. Once you've decided, commit and don't fall into the trap of constantly adding new sources. Dispersion costs you more than any gap in a single book or course ever will.

My final set of resources

Destination Certification (DestCert): Very good. Their book is a must-have. I also highly recommend their YouTube Mind Maps. I played the audios on a loop for semi passive listening while working out, driving, cleaning... 🥲

Pete Zerger (Exam Cram): Straight to the point for review.

Andrew Ramdayal (Udemy): I used his course mainly for the Networking domain, but his "Manager Mindset" videos were also incredibly helpful to get into the right headspace.

LearnZapp: I did almost 2000 questions and was scoring 80%+ by the end. Great question bank, but two caveats. First, it sometimes uses slightly different terms or synonyms than DestCert, which tripped me up as a non-native speaker. Second, the explanations are very brief.

My workaround, which I highly recommend: screenshot every mistake or lucky guess and feed it to an AI for the detailed breakdown the app lacks.

My biggest mistake

I ran out of time to properly review all my saved and incorrect Learnzapp questions, so I went into the exam with some blurry concepts. If I did it again, I'd reserve the last 2 weeks exclusively for reviewing my mistakes.

The Q100 barrier and time management

The exam stopped at 100, which was a lifesaver: I only had 52 minutes left. If it had gone to 150, I would have struggled badly with the clock. Without realizing it, as I approached Q100 I started taking much more care with my answers, praying it would end right there.

The language factor (non-native)

I took it in English (like my CC and Security+) because reliable translated materials are scarce.

I expected convoluted, tricky paragraphs, but almost everything made logical sense. The trick: don't just hunt for MOST, LEAST or PRIMARY. Pay close attention to small adjectives like "new", "old" or "current". A single contextual detail can change the whole answer.

The "Manager Mindset" debate

I've seen posts dismissing the "think like a manager" advice as an outdated fad. In my experience it's essential.

You need a solid technical baseline, but a big chunk of the exam is managerial, and adopting that mindset to protect the business is vital.

Happy with the result and the knowledge gained. I expected a harder exam.

You can do it too. Good luck to everyone still studying!


r/cissp • • 1d ago

Success Story Passed the CISSP exam at 100 questions with 40 minutes remaining on the clock.

32 Upvotes

First of all, I want to thank everyone in this sub. All of your posts and experiences, both while preparing for and after taking the exam, were really helpful to me.

I’ll summarize the resources I used to prepare for the CISSP exam:

- The book Destination CISSP (Rob Witcher / John Berti / Lou Hablas / Nick Mitropoulos).

- The DestCert App on my phone, from the same creators of the book. I used it to gradually build the mindset required for the exam, since the questions in the app help you understand how you’re expected to think.

- The book How to Think Like a Manager by Luke Ahmed.

- Quantum Exams, which I used to complete at least three mock tests before the real exam.

- YouTube videos such as “50 CISSP Practice Questions” by Andrew Ramdayal and “CISSP Exam Cram” by Pete Zerger were also very helpful.

Beyond the resources I used, I also learned some important things during my preparation. I’d like to share them with you, and I hope they can help you as well:

  1. Before taking the exam, I noticed a pattern here in this sub. Several people mentioned that they passed the exam at question 100 with a lot of time still left on the clock. I once asked about this here, and from the responses I received, I understood that the most important thing was to take enough time to read each question carefully and thoroughly instead of letting the clock distract you (don't misunderstand that time management must also be considered).

  2. While doing mock tests with Quantum Exams, I developed the habit of collecting as much information as possible from the final report shown after each attempt. I then took that information to an AI tool to analyze my weak areas and create a study plan focused specifically on them. This exercise also included taking information from the questions I got wrong to identify recurring patterns.

  3. The mind maps created by the Destination CISSP team were also a very useful tool because they allowed me to review each domain after studying it. The way I used them was to upload them to an AI tool and use the voice interaction feature to discuss each topic. The way I knew I had mastered a topic was by being able to explain it clearly.

Once again, thank you for all the valuable information and support I received from this community, and thank you to the people who created and maintain it. The role this community plays is truly amazing.

With this post, I not only want to say thank you, but also give back a little of what I received from all of you. I hope it can provide useful resources and experiences to those who are currently preparing for the exam.

Thank you!


r/cissp • • 1d ago

Success Story Passed at 100 in 80 mins on first attempt - My thoughts...

59 Upvotes

Hi everyone,
I wanted to share my experience after passing the CISSP this morning at 100 questions in 80 minutes on my first attempt at a test centre in Ireland.

When the exam screen turned off at 100 and directed me to the post-exam survey, I was 100% convinced I had failed. The questions looked almost nothing like what I had drilled in practice, with maybe a slight resemblance to QE scenarios. Every answer looked correct with slight wording differences.

My Background:

3.5 years of InfoSec experience + masters in Cybersecurity

Resources Used & Key Takeaways

Andrew Ramdayal Udemy Course: This guy is brilliant. Excellent course and the mindset really helped.

"Think Like a Manager" Mindset (Kelly Handerhan): When you are stuck between two good options, the risk-based, governance-first, human-safety-first option almost always wins.

Quantum Exams: Highly recommended for testing your ability under realistic CAT pressure. Closest example to the real thing. My ability score was floating in the 880+ range on Quantum Exams, and doing scenario-based sets helped build stamina for reading complex prompts under time constraints.

Destination Certification App: Good for the knowledge but nowhere near what the exam looks like.

Looking forward to completing the endorsement in the coming months!


r/cissp • • 1d ago

Cissp from privacy governance perspective

7 Upvotes

I want to gain further knowledge in information security and make it a part of my carreer (ultimately: ai governance, with knowledge of privacy/information security) I'm going to take the cissp exam somewhere in the next 12 months. However I have some questions prior to taking the exam as a newbie in cybersecurity. Especially for people that might have had a comparable situation to mine.

Background: I have a masters in public management. I started as policy advisor (2yrs experience) but later on decided to become privacy officer (1 yr experience) and got CIPPE/CIPM/AIGP. Currently I'm a privacy governance lead. Meaning Some cybersecurity controls are known to me, also alot of governance from cissp is ofcourse familiar.

These prior privacy certs were not hard but required a different way of thinking, so each one took me 1-2 months of 6-8 hrs a week learning.

This got me thinking: how much time will I need for CISSP? Sources are naming somewhere around 200-300 hours, that would take me over 10 months! Right now I've read up to domain 2, did some practice exams and passed most at first try. Is this a false sense of security? I'm reading a lot of different things on this subreddit.

I'm wondering if there are any other people who also went into cissp/information security from privacy? What are your experiences with the exam?


r/cissp • • 1d ago

Passed at 150 question on first attempt, had around 70 mins left

20 Upvotes

Hello people,

Long time lurker and making my first post here. I passed the CISSP exam yesterday on 150 questions, first try with around 70 mins left.

Background : 8+ years in security with almost all of it being in SIEM, DLP, SOC and Vuln Management.

Exam:
I was convinced I failed because honestly I got questions with terms I was not even aware existed in CISSP and had to chose an answer based predominantly on gut feelings or guess work BUT I always chose an answer which was risk, or policy or governance first over implementation whenever applicable.

The exam also makes it clear where it finds you at your weakest and from what I remember today, it grilled me on IAM and possibly Wireless Security. This doesn't surprise me as these are domains I have virtually no job experience. (Admins please let me know if I am violating guidelines by mentioning this and I will remove it).

Studying:
I had a terrible time studying as I just could not focus on the book. So, I chose to do some practise tests on LearnZapp and used Pete Zerger's 1. Top 10 Key Topics and Strategies and 2. How to Think like a Manager videos on youtube.

I believe these two were primarily the reasons I passed. And, imo these were the cheapest options available on the market.

My only takeaway would be : Think like a manager, CISO -> risks, policies, business continuity, engaging with stakeholders or over bringing in external experts takes precedence over answers that are technical implementations.

Thank you to the hundreds of people who mentioned their strategies and recommendations. I hope my experience with the exam helps someone. But please do study more than I did for the exam.

Good luck!!


r/cissp • • 1d ago

Study Material Questions About Learnzapp

5 Upvotes

Hello all,
I am currently working on learnzapp CISSP questions and I feel like a lot of questions are more like memorisation based and straightforward, not too much of analytical mind to apply. Looks very objective.

And I am getting a lot of them wrong as well, which is scary given that I have prepared from Destination Cert book.

Is that the exam format ?


r/cissp • • 1d ago

Pre-Exam Questions Study Material Doubt

2 Upvotes

I have 4 years of GRC experience, and booked my peace of mind slot for 30 Dec.

I have been seeing the success posts in this sub, and noticed no one has gone through Thor’s courses on Udemy. I have completed his courses as the first step of my prep.

I still have another month of my Udemy subscription remaining, so open for other courses as well.

Got the OSG + practice questions, and the dest cert app.

Planning to round up with Dest cert mindmaps on YT.

Looking for suggestions about the course, and further course recommendations. TIA


r/cissp • • 2d ago

Passed at 100 Questions - A week later a member!

25 Upvotes

Took the test October 7th. Suprised when it ended at 100. Provisionally passed.

I studied using the ISC2 online package, Sybex books (CISSP book and Test Questions book). Have a lot of experience in Training, IT, and Management. Been in Cyber approx 10 - 12 years, 5-6 in military contracts.

Watched the Witcher MindMaps as background to learn unfamiliar acronyms, key pieces of info.

The ISC2 package was most useful to me because the questions required relevant parsing and seemed to mirror the test better than others.

Applied for membership and was confirmed after about 3 days.

Kudos to ISC2 for their speed and efficiency in confirming.

Got the e-mail and paid my member fee today. Cert says 01-Nov-2026 effective, not sure if that's normal, but I got my Cert ID.

So excited. Thank you all, whether you know it or not, reading the reddit helped me a bunch in terms of what to watch, read, and listen to.


r/cissp • • 2d ago

Provisionally passed!

31 Upvotes

It’s been a 10 year journey for me. Thanks to everyone here for their stories and journeys. I just needed a place to share.

Test was different from what I expected; on the job experience in a lower budget start up wearing all the hats helped me think through the scenarios the most.


r/cissp • • 3d ago

Success Story Passed on my first attempt yesterday - Don’t know how

60 Upvotes

I’m not trying to brag, but I basically passed this exam without really studying anything.

I had purchased the official book, couple of udemy courses and began to watch the free mind map series on YouTube maybe 3-4 months back.
I ended up getting distracted by other life events and waited till the point I had to schedule my exam in order to have at least a month for my second attempt. Did not touch any of the study material I had bought from being busy.

My plan for this attempt was honestly just to see what the exam is like and how I could prepare better for the real attempt. But I did answer questions best to my knowledge and took time, I was under the impression there would be 100 questions (I know, that’s how badly prepped I was), and when I was at question 125 I had like 4min left, I just hurried through another 10 and ran out of time. Not sure ho many I was supposed to have in total,

To my surprise the front desk had a congratulatory printout - I was incredibly happy and excited I was expecting a failed result and had mentally prepared to sit through this in a month.

My background - 12YOE as solution architect, backend dev and DevOps support.

The main thing I changed after maybe taking that one 10 question practice test months back, was to stop thinking like an engineer and think like an org leader - this tremendously helped me in picking the right answers I think.

Good luck to anyone who is attempting and don’t sweat it too much, you got this! Get the gist of things instead of memorizing technical details


r/cissp • • 3d ago

Success Story Passed the exam at 102 on a “dry run”

46 Upvotes

Hello!

2 days ago I passed the CISSP exam and I'm honestly still in a bit of shock, so I figured I’d write this down while it’s fresh. Hopefully it gives some hope to anyone whose study schedule completely fell apart.

Context:
My degree is completely non-technical. Right after school I fell into network security for about a year and a half during COVID, spent about a year in government, and since then I've been working in security risk management and GRC. So while I have a grip on risk concepts, governance, and business impact, I am definitely not a deep technical engineer.

How my preparation went:
My employer paid for the Peace of Mind bundle, which gave me a safety net. I hoarded all the recommended resources like Destination Certification (book and app), the OSG, Luke Ahmed’s Think Like a Manager, and I even built out an Obsidian vault for notes.

Then life happened. Between work responsibilities, holidays and getting hit with a sudden sickness right before my test date, my studying completely derailed. By exam day, I had only properly read the first 4 chapters of Destination Certification and only had Obsidian notes up to chapter 3. I never even opened the OSG or Luke Ahmed, and barely touched the app.

I only showed up because the retake was already paid for. I walked in fully treating it as an expensive mock exam just to see what the CAT engine felt like so I’d know what to focus on for attempt #2.

The exam stopped at question 102 with about 20 minutes left. I walked out expecting the fail sheet, looked at the paper, and saw the provisional pass. So that was weird.

A few tips from me, should you find them useful:

  1. Really read what the question is asking.
    It sounds obvious, but you have to force yourself to slow down. Half of each question is just background noise. Figure out what role you’re playing, what the actual constraint is, and what they are truly asking for before you even look at the choices.

  2. On the majority of questions, you can eliminate two answers just by using basic logic or spotting things that are completely out of scope.
    That leaves you with two answers. This is where it got weird for me, my initial gut reaction almost always leaned toward the more “obvious” answer. More often than not, I ended up picking the answer I didn't feel emotionally drawn to, but that made the most sense from a big-picture risk perspective, I guess.

  3. Knowing that the engine adapts and looks for your weak spots almost wrecked my focus. Whenever I got 3 or 4 questions in a row from the same area, I was slightly freaking out thinking I was failing. That paranoia makes you second-guess yourself on questions you actually know. If you notice clusters, try to shut that thought down immediately. Treat each question like a fresh one and just keep pushing.

I'm obviously not saying don't study and you'll pass. But if life gets in the way and you feel really underprepared, don't throw in the towel before you sit down. So much of this exam isn't raw trivia memorization, but also it's reading comprehension, elimination, and keeping the large picture in mind.

Good luck to everyone preparing, you've got this!


r/cissp • • 3d ago

Success Story Passed at 140Q today with 10 mins remaining

30 Upvotes

My heart dropped when the exam didn’t stop at 100Q. However i had enough time for the next 50Q, as i had planned 50Q per hour.

Resources used

  1. Destination Cert Book
  2. Destination Cert Mind Maps
  3. Andrew Ramdayal Videos on youtube
  4. LearnzApp for practise questions- covered all domain scored 70-80%
  5. Quantum Exams - felt this was a game changer in my case, helped me understand the way questions are asked. Scored 50-60% in all non-cat tests

Few tips
1. Don’t stress yourself 1 day prior to the exam, keep calm and be positive. Don’t study anything new.
2. I personally used to calm myself down after every 25q by taking 3 deep breathes, which helps in regaining your focus and confidence
3. This is definitely not a memory exam, it tests your thought process. So ready every question carefully and eliminate the wrong ones.

To the ones going to give the exam, believe in yourself- You’ve got this!!

And thanks to this community to help me in my prep phase.


r/cissp • • 3d ago

Passed at 100Q (1st attempt) - my numbers, plus a few patterns from a year of r/CISSP

38 Upvotes

I wasn't keen on adding yet another "I passed!" post, but other people's numbers genuinely helped me prepare. So I got curious and decided to look at the bigger picture.

My numbers

  • First attempt, passed at 100 questions, with 1h15 left - and the feeling of failing about half the time
  • Books: Destination CISSP, OSG, OPT
  • LearnZapp: 79.8% readiness, 100% completion
  • Quantum Exams CATs: 779, 963, 984, 929.

Now, the interesting bit.

I analysed a year of this sub: 2,723 posts and 29,544 comments (Sept 2025–Sept 2026).

First caveat: 942 pass reports vs. 115 fail reports. Obviously, that's not a pass rate. People who fail are less likely to post. This is about patterns in shared experiences, not anyone's actual odds.

A few things caught my attention:

  1. Resources look remarkably similar. QE appeared in 51% of pass reports vs. 55% of fail reports. LearnZapp: 31% vs. 31%. Median prep time was around three months in both groups. No obvious winning combination here.
  2. Question count showed a noticeable pattern. Of pass reports mentioning a number, 68% ended at 100 questions and 77% at 110 or fewer. Fail reports clustered more heavily at 150. Interesting, but definitely not a crystal ball for predicting your result.
  3. QE scores varied quite a bit. Median reported score among passers was 62% correct on QE practice tests - not the CAT ability estimate - with a lower quartile around 50%. Maybe chasing 85% isn't necessarily the point.
  4. Reviewing answers might matter. 22% of pass reports mentioned reviewing why an answer was correct, vs. 10% of fail reports. Small sample, and pass stories may simply be more detailed. Still, reviewing questions you got right while guessing or hesitating seems worth the effort.

My takeaway?

I don't think there's a secret formula hiding in the data. But I'd probably spend less time chasing the perfect resource or practice score, and more time understanding why I got things wrong - and why I sometimes got things right.

One last encouraging number: 137 pass reports mentioned an earlier failed attempt. That's more than the total number of fail reports in the dataset (not necessarily unique people, though).

Happy to hear other interpretations. And if your own experience says something different, add it - the more data points in here, the more useful this gets for whoever’s preparing next.

Good luck to everyone preparing!


r/cissp • • 3d ago

General Study Questions Cloud Academy/QA Study Path

2 Upvotes

Hi there,
I'm interested in obtaining the CISSP and just recently started my study path. I have QA (formerly Cloud Academy) through work and have so far started with the "Preparation for the CISSP Certification" learning path, and I was just wondering if anyone else has used this path to study for the exam or if they found it outdated?


r/cissp • • 5d ago

Provisionally passed

62 Upvotes

So happy!!!

Provisionally passed on Oct 12, exam shut off at 100. A few of you asked me to post a write-up afterwards, so here it is.

Background

  • ~5 years in cybersecurity: SOC (L1 → L3), Microsoft security consulting, now a freelance Azure security architect
  • SC-100, AZ-500, SC-200, CySA+, PenTest+, Security+, ISC2 CC
  • Non-native English speaker
  • Study time: 5 months, the last one intensive

Resources

  • Claude (AI) as my main tutor for the theory. I went domain by domain through Jeffery Moore's CISSP outlines (GitHub) and had it explain every concept with examples from my own work, then quiz me with scenario questions and break down why each wrong answer was wrong.
  • LearnZapp + DestCert app on my phone to drill facts and terminology. Consistently around 70–75% on both.
  • Quantum Exams CAT to train the manager mindset. This was the game changer for me.
  • Andrew Ramdayal's YouTube in the last days (50 hard questions: 40/50).

Quantum Exams scores

Date Mode Result
late Jul Practice, first 100 questions 53%
Aug 28 Exam mode (non-CAT), 100 q 57%
Sep 11 CAT #1, 150 q ~810, pass
Sep 19 CAT #2, 103 q ~880, pass
Oct 6 CAT #3, 150 q 749, pass (felt brutal)

The exam

  • Noticeably easier than QE CAT. After months of QE's long, process-heavy and ambiguous questions, the real ones felt much clearer. QE made the real exam easier for me.
  • A few technical questions surprised me (more detail than I expected), but there were very few of them.
  • From around question 80–90 I was fairly sure I'd pass.

What I'd tell anyone preparing

  • Review every wrong answer AND every lucky guess. Most of my mistakes were reading mistakes, not knowledge gaps.
  • Know the process sequences (IR, BCP/DRP, SDLC, data lifecycle, patch management). The order matters.
  • Train your stamina. My error streaks on practice CATs came from fatigue, not from a specific domain.
  • If English isn't your first language: slow down on unfamiliar words, break them down and use the context.
  • QE scores around 50–60% are normal. Don't panic.

Thanks to everyone here who answered my questions over the past months. Good luck to everyone preparing.

Next cert: CCSP.


r/cissp • • 5d ago

Advice for third attempt

22 Upvotes

I made a post not long ago looking for assistance straight after failing my second attempt. I come back energised after covering the content once again and ready to take on practice exams to find out what areas im still lacking in.

Anyways, one thing ive struggled with primarily with this exam is the mindset. I even feel myself struggling to apply it during my previous two unsuccessful attempts.

What is some advice for learning and applying the CISSP mindset?

Im well aware of the think like a manager, cost, people, process, technology, human life is number 1, etc, and those things that I need to know. Im more after advice on actually learning to apply it to questions where it might be obvious.

To the people who passed, what helped you?

Any advice is greatly appreciated in advance.


r/cissp • • 7d ago

Success Story Passed!!

56 Upvotes

Man that was stressful, watching the questions go up after 100 made me think I was going to fail and so half my brain was prepping to study for another month to use my peace of mind voucher. But when the test stopped at 141 it was a huge relief. I’ve always had big test and interview anxiety which doesn’t help. I also only had like ten minutes left because I read the questions and answers three times.

I read the official text, CISSP for dummies, listened to all of Mike on LinkedIn learning, and did most of the ISC2 online training. Feels good to not have to study for a while.


r/cissp • • 7d ago

Update post to passing at 100Qs yesterday

17 Upvotes

So, I posted yesterday that I passed at 100 questions after months of studying. However, I was too mentally drained afterward to put together a post outlining my study materials and process.
https://www.reddit.com/r/cissp/comments/1x1vva8/passed_at_100/

I know for certain that reading other people's posts helped me tremendously (it's actually how I discovered Quantum Exams), so this is my way of paying it forward and contributing to the community.

First, to my fellow ADHDers:
One thing that really surprised me when I took my first full-length mock exam was just how mentally draining it was. I took it in the morning, and my brain was still mush that evening.

So, one thing I can't stress enough is the importance of building mental endurance. Also, if you take medication, stick to your routine and try to schedule your exam for a time of day when you're at your mental peak.

**My CISSP Reddit post where others helped:
https://www.reddit.com/r/cissp/comments/1wlzvel/comment/pb6m0no/?screen_view_count=2

Now, onto what I used:

Study Materials:

  • Thor's Udemy courses, broken down by domain.
  • THAT'S IT!

Practice Quizzes:

  • Thor's quizzes (Easy/Medium and Hard)
  • Gwen Bettwy
  • Quantum Exams (QE)

My Study Process

When it came to practice quizzes, I spent just as much time answering questions as I did learning the material.

This helped me accomplish two things: training myself to properly understand what was being asked and identifying gaps in my knowledge.

After every quiz, I reviewed all my answers, both correct and incorrect.

Reviewing the incorrect answers was obvious, but I also wanted to understand why I got the correct ones right. I found that quite often, I'd select the correct answer, but my reasoning was flawed.

While that reasoning might have worked for one question, it often led me to answer similar questions incorrectly.

To help identify these issues, I broke my answers down into five categories:

  • A: 50/50 questions I got wrong.
  • B: 50/50 questions I got right.
  • C: Questions I guessed and got wrong.
  • D: Questions I guessed and got right.
  • E: Questions I answered correctly by carefully breaking down what was being asked, even when the answer wasn't immediately obvious.

Now, this might seem excessive to some people, but for those of us who don't naturally do well on exams, I found this approach incredibly helpful.

It allowed me to distinguish between actually understanding the material and simply recognizing an answer. More importantly, it helped me improve my ability to interpret what a question was really asking.

Also, using different banks helped, because if you studying using a lot of questions from one sources, you start to learn the langauge patterns.

Most of the exams I did were with Thor, and only two CATs from QE (330 and 547).

One Final Piece of Advice

Don't be too hard on yourself if an attempt is unsuccessful.

All you can do is your best with the knowledge and preparation you have at that moment. Keep learning, trust the process, and don't let one result define your ability.

Best of luck to everyone preparing for the exam!

P.S. One more tip that really helped me:

Pay close attention to what the question is asking, especially when you see words like these:

  • FIRST/ PRIMARY -> What needs to happen before the other actions?
  • BEST -> Which answer most completely addresses the stated requirement?
  • MOST -> Which answer is the strongest or most direct match?
  • GREATEST -> Which risk has the highest consequence or priority?

Understanding these distinctions helped me approach questions more carefully, especially when multiple answers seemed correct.


r/cissp • • 7d ago

Success Story Needed CISSP for New Job; motivated to pass in 20 days

74 Upvotes

I’ve been a SOC manager for the last two years and within the MDR space for the last eight.

During an interview, I was asked to have CISSP (or equivalent) via contingency offer for the new role. Challenge accepted. I’m not someone who believes in certifications (over experience) but willing to take a shot. I’ll have a job otherwise if they rescind the offer.

Went to Jason Dion’s Udemy course and it was fantastic for filling the gaps in knowledge outside of my actual experience. Not every cybersecurity company or role will give you all 8 domains. Humbly learned asset protection and physical security. Watched at 1.25x. I saw other people say they didn’t like his content but I found it to be quite concise yet informative. Just research terms you don’t know (that he says) and the lightbulb clicks on.

Starting using the Pocket Prep app almost like flashcards. Drilling encryption protocols and other easy win type questions. Quick quizzes I could take anywhere at anytime. Super valuable.

Learnzapp was better in terms of teaching how to read CISSP questions. I was averaging 7-8/10 on quizzes and around 75% of mock exams by showtime. I would only take mock exams every few days just to see progress. Dedicating an hour and a half is tough.

Looking back, I probably only needed one app or the other. Used the scoring system to find which domains I needed to rewatch on Udemy. Thanks to this subreddit for that recommendation. Having too much study content does actually mess with your head at times.

Looking back at my career, I definitely needed the discipline of being able to focus/dedicate time to study. I got my Masters degree a few years back and that really helped me get skills to “buckle down” and work hard. Even if I had the skills by 6 years in, the actual skills to focus weren’t there yet.

Some caveats: I do believe a lot of study materials are intentionally tougher than the actual exam questions. I don’t believe ISC2 is actually trying to mislead you into selecting the wrong answer… whereas the toughest questions on practice are set up that way.

Passed at 1 hour in at 100Q.

Edit: fixed typos

A message to I wish to send myself 3 weeks ago: You absolutely got this. Everyone is different but you’re in this field for a reason. Experience is still king. You’re better than you were 4, 5, 6 years ago because of the experience you’ve gained. You’ve done harder things in life. Mentally this test is like golf. Don’t let the last bad shot mess with the next one. Everyone around you is rooting for you, so take their support when they offer it. Best of luck, but you won’t need it because at an hour in you’ll wonder when the “harder” questions are gonna land. Advance courageously, fear nothing, trust in God, All will be well.


r/cissp • • 8d ago

Passed CISSP after 100 questions! 🎉

51 Upvotes

Finally done!

I studied for around 2 months while working full-time , roughly 2–3 hours every day and around 4–6 hours on weekends.

Resources I used:

Destination CISSP book

Memory Palace notes

LearnZapp for practice questions

Claude AI to drill down into concepts where I needed more explanation

I feel like many others have already mentioned this, but the exam really isn't about memorising facts. It's about understanding what to choose and more importantly why you would choose it.

I have around 8 years of experience across multiple domains in information security and honestly, I felt that experience was probably the most valuable thing I had going into the exam. Being able to look at a scenario and think from a security, risk and management perspective helped a lot.

I finished in about 80 minutes at question 100. I was pretty pleased when the receptionist handed me the letter and I saw the word "Congratulations " 😄

The questions were definitely confusing at times, but honestly, they weren't as bad as I had imagined. I might have just been lucky and avoided some of the really weird ones!

Finally, I want to say a big thank you to this sub Reddit and everyone who shared their exam experiences,tips and recommendations.A lot of the advice I found here was genuinely helpful throughout my preparation.

If you're preparing for the CISSP, this is definitely one of the best places to hang out, learn from others and get some motivation when the studying gets tough.

Best of luck to everyone preparing. You've got this! 💪


r/cissp • • 8d ago

Passed!! at 100.

44 Upvotes

I just took the exam and this morning and I (provissionally) passed at 100Qs.

I know ppl add how they passed, but honestly after 5 months of studying at close to ~30 hours a week, I'm physically and mentally exhausted.

I just wanted to say thank you to all those who posted before about their experience. Those that passed and those that failed.

I really learned from it, and I think it was a big part of today.


r/cissp • • 7d ago

General Study Questions Difficult Level - Destination Cert vs Quantum Exams

7 Upvotes

Hi,

Is it just me or are the questions in the Destination Cert app ridiculously easy but the questions in Quantum Exams are ridiculously hard?!

How do they compare to the real exam? I'm hoping/assuming/praying that the real exam is somewhere in between the two of them in terms of difficulty.


r/cissp • • 8d ago

Study Material Questions Started to read the dest cert physical book and I have to be honest

17 Upvotes

Anyone else not a big fan of the book? I see the mindmaps and realize that all of the 50 pages per domain is covered through 30 mins of videos; most of the reading seems to just be 90% jargon and then 10% of what I actually need to know for the exam. Anyone else feel this way? With the CISSP Last Mile book, I felt like I was ready to take notes right off the bat