I used the Security+ Study Guide from Syngress Shinder Books. Very good IMO and came with a disk that had a practice exam engine. Worked for me.

I took the GCIH at the conference in Virginia Beach last year and thougth it was great. I would have to agree that I felt like someone (Ed) opened the flood gates and let it flow. It was a lot of info to consume in a weeks worth of time. Also, I was lucky enough to get the on-demand course at a discounted rate so I was able to go back and review the class at my own pace. That was money well spent. To date, I have not taken a SANS @home course but am considering it. This was hands down the best class I have ever taken. Loads of fun to boot.

I read the Official CISSP Study Guide and found it useful. The CCCure practice exams helped me tremendously. I was also fortunate that the compay I work for was willing to pay for me to attend a CISSP boot camp. I will pass along what I think was the best advice I recieved:

The day and night before the test, don't even study. Do what ever it is you love to do like go fishing or something. For me it was very helpfull because it lowered my stress level before sitting for the exam. Hope this helps.

Has the solution to this challenge been posted?

Regardless of the origin of the attack, the relative ease with which this information was obtained is what is scary.

Encryption anyone?

I too have had the opportunity(?) to tackle this project. The NIST 800-18 provides some pretty good information also.

Quite tedious indeed.