Home
Calendar
Certifications
Columns
Features
Forum
Resources
Vitals
Latest Additions
April 2013 Free Giveaway Sponsor - eLearnSecurity
Human Intelligence to Navigate the Security Data Deluge
February 2013 Free Giveaway Winner of SANS CyberCon Training
Interview: Bugcrowd Founders on Herding Ninjas for Crowdsourced Bug Bounties
Network Forensics: The Tree in the Forest
March 2013 Free Giveaway Sponsor - Mile2
Book Review: Violent Python
February 2013 Free Giveaway Sponsor - SANS
Holiday 2012 Free Giveaway Winner of Metasploit Pro by Rapid7
Course Review: SANS FOR408 Computer Forensic Investigations – Windows In-Depth
The Security Consulting Sugar High
Tutorial: Fun with SMB on the Command Line
Interview: Ilia Kolochenko, CEO of High-Tech Bridge
October 2012 Free Giveaway Winner of LearningGate Training
The Broken: Assessing Corporate Security in 2012 to Make a Better 2013
EH-Net Login
Welcome Guest.
Username:
Password:
Remember me
Lost Password?
No account yet?
Register
Who's Online
We have 41 guests online
You are here:
Home
Ethical Hacking Discussions and Related Certifications
General Certification
CISSP - The Necessary Evil
EH-Net
May 22, 2013, 07:56:34 PM
Welcome,
Guest
. Please
login
or
register
.
Did you miss your
activation email?
1 Hour
1 Day
1 Week
1 Month
Forever
Login with username, password and session length
News
: Go back to The Ethical Hacker Network Online Magazine
Home Page
Home
Help
Calendar
Login
Register
EH-Net
>
Ethical Hacking Discussions and Related Certifications
>
General Certification
(Moderator:
don
) >
CISSP - The Necessary Evil
Pages: [
1
]
Go Down
« previous
next »
Print
Author
Topic: CISSP - The Necessary Evil (Read 11756 times)
0 Members and 1 Guest are viewing this topic.
Dark_Knight
Sr. Member
Offline
Posts: 292
CISSP - The Necessary Evil
«
on:
October 25, 2009, 09:11:05 PM »
Guys,
I found some old threads on this. But wanted to know what is the best option to wrap this up. All the threads listed Shon Harris All-in-One Exam Guide, Fourth Edition and ccure.org as great resources. Does this still stand?
Who offers the best live training now?
Logged
CEH, OSCP, GPEN, GWAPT, GCIA
http://sector876.blogspot.com
dalepearson
Sr. Member
Offline
Posts: 357
Re: CISSP - The Necessary Evil
«
Reply #1 on:
October 26, 2009, 03:36:40 AM »
For me I would say not the Shon book, as some of the statements and reference I found in the books did not match the CISSP material.
So I would say get the official CISSP book, and yes CCURE is a great resource.
Logged
:: Subliminal Hacking ::
/
:: Security Active Blog ::
unsupported
Sr. Member
Offline
Posts: 318
Unofficial Newbie Moderator
Re: CISSP - The Necessary Evil
«
Reply #2 on:
October 26, 2009, 08:45:10 AM »
I've only experienced live training from John "Hack" Hackmeyer at
http://cybercrocodile.com/
. Although he does cover the material, the training is less about the "material" and more about how to make the test manageable. A lot of tips and tricks for breaking down the logistics of the test. I've heard good things from my co-workers about New Horizons, but that is more related to the trainers rather than the material.
There is no way to learn everything you need in live training. AIO 4th edition and CCCURE.ORG are very good resources.
Logged
-Un
CISSP, GCIH, GCIA, C|EH, Sec+, Net+, MCP
don
Editor-In-Chief
Administrator
Hero Member
Offline
Posts: 4167
Editor-In-Chief
Re: CISSP - The Necessary Evil
«
Reply #3 on:
October 26, 2009, 08:56:39 AM »
I would recommend the following:
1. Get the ISC2 Official Book to get an idea of how they think. This will help you with terminology used in the exam questions.
2. Get a second book not by ISC2 to get someone else's take on the material. Sometimes another person can make material stick better in your brain. The Shon Harris book has been used and reco'd by a lot of people. I can't speak for the recent version, but I found one of the earlier versions very helpful.
3. Clement's CCCure.com site is almost universally recognized as a top resource for CISSP. Use it.
4. Training Camp does a fantastic 7-day course with an ISC2 instructor, ISC2 material, a practice exam with real, retired questions from old CISSP exams and finally, the exam is provided on site. Call Mike McNelis at 800.698.5501, and tell him I sent you.
4b. If you can't afford live, instructor-led training, try some of the video series like CBT Nuggets. There are others as well. Look around and find the one that fits you best.
Finally... negotiate. With the economy the way that it is, not a lot of people can afford training. That means that courses are not filling up. All companies have room to move when it comes to pricing.
Hope that helps,
Don
PS - unsupported posted his response while I was typing. He is correct. No 1 week course can teach you everything. That is why you have to treat them as a review and final preps for taking the exam. Going through the material before you arrive is a must IMHO.
Logged
CISSP, MCSE, CSTA, Security+ SME
alucian
Full Member
Offline
Posts: 225
Re: CISSP - The Necessary Evil
«
Reply #4 on:
October 26, 2009, 09:17:00 AM »
I studied for the Shon Harris, 4th edition. I really liked the style, it is clear and concise, and the little jokes at the debut of each chapter will rise your morale for the next pages.
Also, she has a video series, which is good too. I have extracted the audio from them and listen while I was commuting, and in other situations.
The cccure site is very good, but (last year) I found the pro questions being closer to the exam. The medium ones are more for Security+. The moment you'll gonna score around 90% at the pro questions you'll pass the exam without problems.
Good luck.
PS If you want to have an idea about the type of questions look at this questions, they are for the CISM certification:
http://www.isaca.org/Template.cfm?Section=Exam_Information1&Template=/ContentManagement/ContentDisplay.cfm&ContentID=42005
CISM is a very interesting certification too, and they have the strangest evaluation system.
Logged
CISSP ISSAP, CISM/A, GWAPT, GCIH, eCPPT, OSWP
Dark_Knight
Sr. Member
Offline
Posts: 292
Re: CISSP - The Necessary Evil
«
Reply #5 on:
October 26, 2009, 07:12:09 PM »
Thanks guys. The comments are very much appreciated.
Quote
Training Camp does a fantastic 7-day course with an ISC2 instructor, ISC2 material, a practice exam with real, retired questions from old CISSP exams and finally, the exam is provided on site. Call Mike McNelis at 800.698.5501, and tell him I sent you.
Don funny you should mention that because they are on my shortlist.
Logged
CEH, OSCP, GPEN, GWAPT, GCIA
http://sector876.blogspot.com
Ketchup
Hero Member
Offline
Posts: 1021
Re: CISSP - The Necessary Evil
«
Reply #6 on:
October 26, 2009, 08:55:16 PM »
When I went through my CISSP materials, I used the following:
1. Shon Harris book, 3rd edition I believe. The book was great, but the practice questions included on the CD needed some major work. There were a few that didn't even have answers.
2. CCCURE.org website was helpful, but I only discovered it two weeks before the test.
3. Transcender Practice Tests. I have to say that these were somewhat disappointing. I used Transcenders before, but the CISSP version was not very close to the actual test.
4. I glanced over the official ISC2 book, but I felt that the Shon Harris book covered the same concepts, just in a slightly different order.
I passed the test on my first attempt, but I was pretty sure that I failed after taking it. The study materials must have worked.
One other piece of advice, schedule your test in advance. You cannot take the CISSP exam on a whim at a Vue or Prometric test center. There are a few licensed places that administer the test, and it can be tough to find a date that fits your schedule.
Good luck!
Logged
~~~~~~~~~~~~~~
Ketchup
bill_clancy
Newbie
Offline
Posts: 4
Re: CISSP - The Necessary Evil
«
Reply #7 on:
January 11, 2010, 10:59:07 AM »
I agree with Don. However the ISC is releasing a new book!!
http://www.isc2education.org/store/product_info.php?cPath=9&products_id=568
No sense in reading dated material...get the fresh stuff. I read that old yellow book several times, and worked some practice questions, till I was blue in the face. took the test and was sure I flunked, but I managed to get through.
On test day...keep to yourself, several folks approached me and seemed to be trying to undermine my confidence..."Is this the first time you're testing?", "Didn't you take the bootcamp first?" etc. Keep your eye on the prize!
Logged
teedge77
Newbie
Offline
Posts: 9
Re: CISSP - The Necessary Evil
«
Reply #8 on:
February 25, 2010, 08:32:46 AM »
I thought I would add one more thing that seems to be very often overlooked.
Wikipedia.
I found it an invaluable resource while studying. I also used a CBT and CCCURE.org. After the CBT I took practice tests on CCCURE and anything I was still weak on, I used Wikipedia to get a better grasp of.
Maybe I'm just a cheap bastard, but why spend money for information that's freely available with a little extra effort? As well as being more in-depth than CISSP study materials. Just 'cause the test is "an inch deep"...doesn't mean you can't (or shouldn't) go further.
Logged
j0rDy
Hero Member
Offline
Posts: 590
Re: CISSP - The Necessary Evil
«
Reply #9 on:
February 25, 2010, 09:03:55 AM »
because all the "good" answers have already been given, i can only tell you what NOT to do
stay away from the cissp in 21 days book, way to high level and does not cover the thing that is mostly required (CISSP "mindset" which can only be obtained from the original material).
also the CISSP for dummies was mostly a waste of time. some areas were covered perfectly, while others were lacking and some even too deep (way to technical for the exam).
on the other hand, a few good tips that came from CFD are:
get some earplugs. i really hated to be in a room with 100 people all eating, drinken and moaning about the difficutly of the exam.
get plenty to eat/drink for yourself, 6 hours is killing!
schedule some breaks, it will improve your focus and speed during the exam.
don't plan anything after the exam, maybe the only thing you want to do is grab a beer (with some friends if you prefer).
good luck and tell us how you did!
Logged
ISC2 Associate, CEH, ECSA, OSCP, OSWP
earning my stripes appears to be a road i must travel alone...with a little help of EH.net
oneeyedcarmen
Full Member
Offline
Posts: 233
Klaatu, Borada,Necktie?
Re: CISSP - The Necessary Evil
«
Reply #10 on:
February 25, 2010, 09:30:14 AM »
Sure, I'll hop on this dead horse and whip it some more
I would definitely say that using the (ISC)
2
material, dry as it may be, is the best way to go to start of. Struggle through it. I read it twice through, sometimes feeling like doing the old Clockwork Orange to keep my eyes open. Then read another book. I didn't really like Shon's big book, but Mike Meyers has a series out called "Passport" or something like that, and Shon did a CISSP book for him. It's a bit shorter (ONLY 500 pages or so!), but much more relaxed.
Best thing to do is definitely to look at the (ISC)
2
website and book a test several months out. That will not only give you time to get your studying in, but also put just a little pressure on you not to slack off.
Following my own advice, I felt pretty confident going into the test. Then I was surprised by my in-laws with the gift of a last minute bootcamp with
Larry Greenblatt
. I'm not sure that I learned anything NEW from Larry (other than Tai Chi, a joke you'll get if you've had Larry as an instructor), but he definitely reinforced the training I'd given myself.
Good luck!
Logged
Reluctant CISSP, Certified ASS
Pages: [
1
]
Go Up
Print
« previous
next »
Jump to:
Please select a destination:
-----------------------------
EH-Net
-----------------------------
=> Calendar Of Events
===> ChicagoCon 2007
===> ChicagoCon 2008s
===> ChicagoCon 2008f
===> ChicagoCon 2009s
=> Ethical Hacktivism
=> News Items and General Discussion About EH-Net
===> Greetings
=> Special Events
-----------------------------
Ethical Hacking Discussions and Related Certifications
-----------------------------
=> General Certification
===> Networking
===> OS
===> Security
=> Compliance, Regulations & Standards
=> Control Systems
=> Cyber Warfare
=> Forensics
===> CCE / MCCE - (Master) Certified Computer Examiner
===> CHFI - Computer Hacking Forensic Investigator
===> EnCE - EnCase® Certified Examiner
===> GCFA - GIAC Certified Forensics Analyst
=> Hardware
=> Incident Response
===> CSIH - Computer Security Incident Handler
===> GCIH - GIAC Certified Incident Handler
=> Malware
===> Advisories
=> Mobile
=> Network Pen Testing
===> CEH - Certified Ethical Hacker
===> CPTC - Certified Penetration Testing Consultant
===> CPTE - Certified Penetration Testing Engineer
===> CSTA - Certified Security Testing Associate
===> eCPPT - eLearnSecurity Certified Professional Penetration Tester
===> ECSA - EC-Council Certified Security Analyst
===> GPEN - GIAC Certified Penetration Tester
===> OSCP - Offensive Security Certified Professional
=> Physical Security
=> Programming
=> Social Engineering
=> Web Applications
=> Wireless
===> CWNP Certs
===> GAWN - GIAC Assessing Wireless Networks
===> OSWP - Offensive Security Wireless Professional
=> Other
-----------------------------
Columns
-----------------------------
=> Editor-In-Chief
=> Andress
=> Gates
=> Haddix
=> Hadnagy
=> Heffner
=> Hoffman
=> Linn
=> RichM
=> Murray
=> J. Peltier
=> Weidman
=> Wilson
-----------------------------
Features
-----------------------------
=> /root
=> Book Reviews
=> Opinions
=> Skillz
===> Examples
===> May 06 - Star Hacks, Episode V: The Empire Hacks Back
===> July 06 - Hack Bill!
===> Sept 06 - Netcat in the Hat
===> Nov 06 - Hitch-Hackers Guide to the Galaxy
===> Dec 06 - A Christmas (Hacking) Story
===> Feb 07 - Charlottes Web Site
===> April 07 - Microsoft Office Space
===> June 07 - Serenity Hack
===> Oct 07 - Worst. Ethical. Hacker. Challenge. Ever.
===> Dec 07 - Frosty the Snow Crash
===> March 2008 - It Happened One Friday
===> Oct 2008 - Scooby Doo and the Crypto Caper
===> Dec 08 - Santa Claus Is Hacking to Town
===> Feb 2009 - Brady Bunch Boondoggle
===> July 2009 - Prison Break
===> October 2009 - SSHliders
===> December 2009 - Miracle on Thirty-Hack Street
===> December 2010 - The Nightmare Before Charlie Browns Christmas
-----------------------------
Resources
-----------------------------
=> Career Central
===> Looking For Work
===> Looking To Hire
=> Links to cool sites.
=> Mass Media
=> News from the Outside World
=> Tools
=> Tutorials
===> Tutorial Requests
Loading...
Exclusive Deal
SANSFIRE 2013
June 15 - 22
5% Off
w/ Code
:
EHN_5
SANS Deals 4 EH-Netters
5% OFF
Any
SANS Course
in Any Format!
Coupon Code:
EHN_5
Including
SANS Rocky Mountain 2013
&
SANS Boston 2013
Polls
Compared to this year, 2013 will be:
Great!
Better.
About the same.
Little worse.
FUBAR!
Recent Forum Topics
News Items and General Discussion About EH-Net
: 1000 страшно пол
(0) by
quohaphoday
GPEN - GIAC Certified Penetration Tester
: Karen Millen Outlet as an example SFTP
(0) by
dtree28yt
News Items and General Discussion About EH-Net
: Change is Coming to EH-Net!!
(27) by
don
Greetings
: Hi from the UK
(2) by
n37sh@rk
Network Pen Testing
: AIX Vulnerability Assessments
(2) by
ras76
Tutorials
: Need guidance
(9) by
hanyhasan
Programming
: Finished Python Course in Codecademy now what?
(15) by
hanyhasan
Network Pen Testing
: Ruby on Rails Vulnerabilities / Attacks in BackTrack 5 r3
(0) by
SUdoctstudent
Network Pen Testing
: De-ICE 1.140 released!
(2) by
superkojiman
General Certification
: CPT Practical Submission
(1) by
UNIX
OSCP - Offensive Security Certified Professional
: Failed my first attempt at the OSCP exam
(94) by
azmatt
Tools
: Social-Engineer Toolkit (SET) Version 5.0 “The Wild West” Released
(2) by
m0wgli
Malware
: EICAR?
(3) by
UKSecurityGuy
Advisories
: HTB23154: Multiple Vulnerabilities in Exponent CMS
(0) by
AndyP
Advisories
: HTB23153: Multiple Vulnerabilities in Jojo CMS
(0) by
AndyP
Advisories
: HTB23151: Cross-Site Request Forgery (CSRF) in UMI.CMS
(0) by
AndyP
OSCP - Offensive Security Certified Professional
: Class Scheduled 6/8 - Linux n00b
(7) by
Taemyks
OSCP - Offensive Security Certified Professional
: OSCP exam scheduled
(6) by
gbhat
Incident Response
: LinkedIn Forensics
(0) by
AFENTIS_Forensics
General Certification
: Red Team/Blue Team
(1) by
ajohnson
Career Central
: Starter cert?
(3) by
Grendel
Network Pen Testing
: Beginner Ethical Hacker
(1) by
m0wgli
Web Applications
: Nessus and Nikto
(4) by
Seen
Network Pen Testing
: Cracking salted MD5 hash
(4) by
n37sh@rk
CEH - Certified Ethical Hacker
: Passed my C|EH
(3) by
n37sh@rk
Mass Media
: EC-council hacked, irony at his best?
(0) by
j0rDy
Web Applications
: SQL Injection into an INSERT statement.
(6) by
eyenit0
Network Pen Testing
: Solution for sipXtapi INVITE Message CSeq Field Header Remote Overflow
(1) by
m0wgli
Web Applications
: dns
(2) by
H1t M0nk3y
EH-Net News Feeds
Latest Additions
Privacy Notice
for TDCC & All Properties
© 2013 The Ethical Hacker Network
Joomla!
is Free Software released under the GNU/GPL License.