Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 49 guests online
 
Free Business and Tech Magazines and eBooks

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow General Certificationarrow CISSP - The Necessary Evil
EH-Net
May 18, 2013, 03:49:38 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: CISSP - The Necessary Evil  (Read 11736 times)
0 Members and 1 Guest are viewing this topic.
Dark_Knight
Sr. Member
****
Offline Offline

Posts: 292


View Profile WWW
« on: October 25, 2009, 09:11:05 PM »

Guys,
I found some old threads on this. But wanted to know what is the best option to wrap this up. All the threads listed Shon Harris All-in-One Exam Guide, Fourth Edition and ccure.org as great resources. Does this still stand?

Who offers the best live training now?   

Logged

CEH, OSCP, GPEN, GWAPT, GCIA
http://sector876.blogspot.com
dalepearson
Sr. Member
****
Offline Offline

Posts: 357


View Profile WWW
« Reply #1 on: October 26, 2009, 03:36:40 AM »

For me I would say not the Shon book, as some of the statements and reference I found in the books did not match the CISSP material.

So I would say get the official CISSP book, and yes CCURE is a great resource.
Logged

unsupported
Sr. Member
****
Offline Offline

Posts: 318


Unofficial Newbie Moderator


View Profile
« Reply #2 on: October 26, 2009, 08:45:10 AM »

I've only experienced live training from John "Hack" Hackmeyer at http://cybercrocodile.com/.  Although he does cover the material, the training is less about the "material" and more about how to make the test manageable.  A lot of tips and tricks for breaking down the logistics of the test.  I've heard good things from my co-workers about New Horizons, but that is more related to the trainers rather than the material.

There is no way to learn everything you need in live training.  AIO 4th edition and CCCURE.ORG are very good resources.
Logged

-Un
CISSP, GCIH, GCIA, C|EH, Sec+, Net+, MCP
don
Editor-In-Chief
Administrator
Hero Member
*****
Offline Offline

Posts: 4165


Editor-In-Chief


View Profile WWW
« Reply #3 on: October 26, 2009, 08:56:39 AM »

I would recommend the following:

1. Get the ISC2 Official Book to get an idea of how they think. This will help you with terminology used in the exam questions.
2. Get a second book not by ISC2 to get someone else's take on the material. Sometimes another person can make material stick better in your brain. The Shon Harris book has been used and reco'd by a lot of people. I can't speak for the recent version, but I found one of the earlier versions very helpful.
3. Clement's CCCure.com site is almost universally recognized as a top resource for CISSP. Use it.
4. Training Camp does a fantastic 7-day course with an ISC2 instructor, ISC2 material, a practice exam with real, retired questions from old CISSP exams and finally, the exam is provided on site. Call Mike McNelis at 800.698.5501, and tell him I sent you.
4b. If you can't afford live, instructor-led training, try some of the video series like CBT Nuggets. There are others as well. Look around and find the one that fits you best.

Finally... negotiate. With the economy the way that it is, not a lot of people can afford training. That means that courses are not filling up. All companies have room to move when it comes to pricing.

Hope that helps,
Don

PS - unsupported posted his response while I was typing. He is correct. No 1 week course can teach you everything. That is why you have to treat them as a review and final preps for taking the exam. Going through the material before you arrive is a must IMHO.
Logged

CISSP, MCSE, CSTA, Security+ SME
alucian
Full Member
***
Offline Offline

Posts: 225



View Profile
« Reply #4 on: October 26, 2009, 09:17:00 AM »

I studied for the Shon Harris, 4th edition. I really liked the style, it is clear and concise, and the little jokes at the debut of each chapter will rise your morale for the next pages.
Also, she has a video series, which is good too. I have extracted the audio from them and listen while I was commuting, and in other situations.
The cccure site is very good, but (last year) I found the pro questions being closer to the exam. The medium ones are more for Security+. The moment you'll gonna score around 90% at the pro questions you'll pass the exam without problems.
Good luck.

PS If you want to have an idea about the type of questions look at this questions, they are for the CISM certification:
http://www.isaca.org/Template.cfm?Section=Exam_Information1&Template=/ContentManagement/ContentDisplay.cfm&ContentID=42005

CISM is a very interesting certification too, and they have the strangest evaluation system.
Logged

CISSP ISSAP, CISM/A, GWAPT, GCIH, eCPPT, OSWP
Dark_Knight
Sr. Member
****
Offline Offline

Posts: 292


View Profile WWW
« Reply #5 on: October 26, 2009, 07:12:09 PM »

Thanks guys. The comments are very much appreciated.

Quote
Training Camp does a fantastic 7-day course with an ISC2 instructor, ISC2 material, a practice exam with real, retired questions from old CISSP exams and finally, the exam is provided on site. Call Mike McNelis at 800.698.5501, and tell him I sent you.
Don funny you should mention that because they are on my shortlist.
Logged

CEH, OSCP, GPEN, GWAPT, GCIA
http://sector876.blogspot.com
Ketchup
Hero Member
*****
Offline Offline

Posts: 1021



View Profile
« Reply #6 on: October 26, 2009, 08:55:16 PM »

When I went through my CISSP materials, I used the following:

1.  Shon Harris book, 3rd edition I believe.   The book was great, but the practice questions included on the CD needed some major work.  There were a few that didn't even have answers.

2.  CCCURE.org website was helpful, but I only discovered it two weeks before the test.

3.  Transcender Practice Tests.   I have to say that these were somewhat disappointing.   I used Transcenders before, but the CISSP version was not very close to the actual test.

4.  I glanced over the official ISC2 book, but I felt that the Shon Harris book covered the same concepts, just in a slightly different order.

I passed the test on my first attempt, but I was pretty sure that I failed after taking it.   The study materials must have worked.

One other piece of advice,  schedule your test in advance.  You cannot take the CISSP exam on a whim at a Vue or Prometric test center.   There are a few licensed places that administer the test, and it can be tough to find a date that fits your schedule. 

Good luck!
Logged

~~~~~~~~~~~~~~
Ketchup
bill_clancy
Newbie
*
Offline Offline

Posts: 4


View Profile
« Reply #7 on: January 11, 2010, 10:59:07 AM »

I agree with Don. However the ISC is releasing a new book!!

http://www.isc2education.org/store/product_info.php?cPath=9&products_id=568

No sense in reading dated material...get the fresh stuff. I read that old yellow book several times, and worked some practice questions, till I was blue in the face. took the test and was sure I flunked, but I managed to get through.
 On test day...keep to yourself, several folks approached me and seemed to be trying to undermine my confidence..."Is this the first time you're testing?", "Didn't you take the bootcamp first?" etc. Keep your eye on the prize!
Logged
teedge77
Newbie
*
Offline Offline

Posts: 9


View Profile
« Reply #8 on: February 25, 2010, 08:32:46 AM »

I thought I would add one more thing that seems to be very often overlooked.

Wikipedia.

 I found it an invaluable resource while studying. I also used a CBT and CCCURE.org. After the CBT I took practice tests on CCCURE and anything I was still weak on, I used Wikipedia to get a better grasp of.

Maybe I'm just a cheap bastard, but why spend money for information that's freely available with a little extra effort? As well as being more in-depth than CISSP study materials. Just 'cause the test is "an inch deep"...doesn't mean you can't (or shouldn't) go further.
Logged
j0rDy
Hero Member
*****
Offline Offline

Posts: 590


View Profile
« Reply #9 on: February 25, 2010, 09:03:55 AM »

because all the "good" answers have already been given, i can only tell you what NOT to do Wink

stay away from the cissp in 21 days book, way to high level and does not cover the thing that is mostly required (CISSP "mindset" which can only be obtained from the original material).

also the CISSP for dummies was mostly a waste of time. some areas were covered perfectly, while others were lacking and some even too deep (way to technical for the exam).

on the other hand, a few good tips that came from CFD are:

get some earplugs. i really hated to be in a room with 100 people all eating, drinken and moaning about the difficutly of the exam.
get plenty to eat/drink for yourself, 6 hours is killing!
schedule some breaks, it will improve your focus and speed during the exam.
don't plan anything after the exam, maybe the only thing you want to do is grab a beer (with some friends if you prefer).

good luck and tell us how you did!
Logged

ISC2 Associate, CEH, ECSA, OSCP, OSWP

earning my stripes appears to be a road i must travel alone...with a little help of EH.net
oneeyedcarmen
Full Member
***
Offline Offline

Posts: 233


Klaatu, Borada,Necktie?


View Profile
« Reply #10 on: February 25, 2010, 09:30:14 AM »

Sure, I'll hop on this dead horse and whip it some more Wink

I would definitely say that using the (ISC)2 material, dry as it may be, is the best way to go to start of. Struggle through it. I read it twice through, sometimes feeling like doing the old Clockwork Orange to keep my eyes open. Then read another book. I didn't really like Shon's big book, but Mike Meyers has a series out called "Passport" or something like that, and Shon did a CISSP book for him. It's a bit shorter (ONLY 500 pages or so!), but much more relaxed.

Best thing to do is definitely to look at the (ISC)2 website and book a test several months out. That will not only give you time to get your studying in, but also put just a little pressure on you not to slack off.

Following my own advice, I felt pretty confident going into the test. Then I was surprised by my in-laws with the gift of a last minute bootcamp with Larry Greenblatt. I'm not sure that I learned anything NEW from Larry (other than Tai Chi, a joke you'll get if you've had Larry as an instructor), but he definitely reinforced the training I'd given myself.

Good luck!
Logged

Reluctant CISSP, Certified ASS
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.085 seconds with 24 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Free Business and Tech Magazines and eBooks

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.