Im 26 years old and work as a Sales Engineer at HackerOne, helping commercial companies implement hacker-powered security. I started at the company in September 2022 with very little security experience.
Was honestly a little offended\u2026 But he was right! My only work experience was two years of digital transformation work at Deloitte. And even though security was a critical part of my work, I wasn't particularly passionate about it \u2014 which seemed to be evident.
I was selling well, but I knew my lack of security knowledge was holding me back. So after a year at the company, I approached my boss for help. He recommended I get a certification, listing a few I should consider \u2014 Security+, CISSP, and AWS Certified Cloud Practitioner.
After scanning r/cybersecurity, r/salesengineers, and r/cissp, I decided I wanted to pursue a CISSP \u2014 mile wide and inch deep was exactly what I was looking for. My thought process was I just needed enough to be able to speak the same language as the CISOs and security leaders I was selling to.
Then, during week three, my boss gifted me the Destination CISSP textbook \u2014 which was 100x easier to read than the OSG \u2014 the Destination CISSP Workbook \u2014 which gave my notes some structure \u2014 and I subscribed to the Learnzapp questions \u2014 after hearing a lot of good stuff about them on r/cissp.
Well, I never got there and still passed. Not sure where I read that, but if that\u2019s some sort of target for your studies, it\u2019s a good goal to have, but don\u2019t beat yourself up or whig yourself out if you don\u2019t get there.
If you\u2019re not familiar with the CISSP exam, it\u2019s a CAT (computerized adaptive examination) that delivers different questions based on how you are performing in different learning domains. Candidates are asked a minimum of 125 questions and a maximum of 175.
And if at question 125, the exam is between 5% and 95% confident you\u2019ll pass given the remaining questions, then you unlock another 50 questions to demonstrate your proficiency (and hopefully pass).
But, I moved through the rest of the questions, my hand shaking on the mouse. All I could think about was how much it would suck to have to tell my boss, family, and friends that I not only failed, but I failed because I ran out of time \u2014 so dumb.
As stressful as the last 45 minutes of the exam was, the whole thing was a great experience \u2014 choosing a certification, creating a plan, and getting it done. I learned a lot along the way. And there\u2019s a slew of things I\u2019d tell myself if I had to take the CISSP again\u2014 which I never will.
Prioritize practice problems: I spent a lot of time reading and taking notes, but doing more questions helped me learn faster and build my confidence. To be honest, part of my reluctance to really invest in practice problems earlier on in my studies was because I didn\u2019t want to fail. I didn\u2019t want to get questions wrong. Sounds stupid, but that\u2019s the truth. So don\u2019t be like me. Don't be scared to get things wrong at first. Because that\u2019s how you learn.
Practice your pacing: I didn\u2019t do this at all, and it almost cost me failing because I wasn\u2019t able to answer all the questions in time! The practice exams I completed were 125 questions, but if I was to do it again, I\u2019d practice with full-length exams of 175 questions instead. I\u2019d also stick with a set cadence of spending X seconds per question \u2014 I neither practiced that nor did it on the exam.
Buy the Destination Certification Crash Course: The Destination CISSP materials were awesome. I\u2019m really grateful my boss gave me the textbook and workbook. If I were to do it again, I\u2019d purchase the whole crash course. It was the most helpful material for me out of everything I studied.
Prioritize memorization techniques: Prioritize creating memory tricks to help remember things. I only did this in my last week of studying. It definitely would have made studying easier\u2026 There's a lot of material to learn, so don\u2019t feel bad if you need some tricks to memorize stuff. I know a lot of people will tell you \u201CWell you should really understand this stuff! You owe it to yourself and your employer\u201D And they\u2019re right. But also, there's a lot of stuff to know. Anyways, I highly recommend checking out Pete Zerger\u2019s video on memorization tips and techniques. Oh, and check out this post on r/cissp \u2014 wish I had found this prior to two days before my exam.
Review your notes early and often: I should have read my notes more often while studying. My notes were in my own words, so they helped me understand things more easily than reading the textbook \u2014 highly recommend the Destination CISSP Workbook.
Do more math problems: For math problems \u2014 or anything that needs a formula \u2014 , just practice them. At first, I had trouble with some math parts, but if I practiced more, I would have been fine. This video from Pete Zerger is great.
Avoid reading too many success / failure stories on r/cissp**:** There's a lot of good information in reading success / failure stories, but if you read too many of them, you\u2019ll drive yourself insane. Everyone\u2019s background, situation, and journeys are different. So use those stories as a way to build your plan, but once you have your plan, just stick to it and get to work.
As stressful as the last 45 minutes of the exam were, the whole thing was a great experience \u2014 choosing a certification, creating a plan, and getting it done. I learned a lot along the way. And there\u2019s a slew of things I\u2019d tell myself if I had to take the CISSP again\u2014 which I never will. stick with a set cadence of spending X seconds per question \u2014 I neither practiced that nor did it on the exam.nd I did the work! So I had nothing to worry about.
If you\u2019re thinking about taking the CISSP, do it. I thought it was an awesome experience and I learned a ton \u2014 especially as a dude with little security experience. It gave me the confidence I needed to do my job better.
If you\u2019re currently in the trenches, keep at it. Review your notes often, do lots of practice problems, and invest some time in creating some memory tricks to make your life easier. And last but not least, make sure to pace yourself so you\u2019re not trying to do 50 questions in 45 minutes like I had to. I do not wish that upon my worst enemy\u2026
In the world of Cloud/Devops where evrythng is first made On and For Linux
You guys says we cloud & devops guys who actually work on Ubuntu/Linux entire day need a Window or Mac to give exam ..lol
This cant get worse and disrespectful
In the world of Cloud/Devops where evrythng is first made On and For Linux
These guys says we cloud & devops guys who actually work on Ubuntu/Linux entire day need a Window or Mac to give exam ..lol
This cant get worse and disrespectful
Hey, I'm new here, but I'll try to help you out. So, as long as your system meets the minimum requirements, you should be good to go. Just make sure to check the exam details before registering. As for study materials, there are a ton of resources out there! You could try a crash course like Linux Academy or Udemy. They have plenty of courses on cloud computing and should help you prepare for the exam. Just be sure to check the reviews before purchasing. Oh, and one more thing - have you heard about centos 7 end of life? It's a big deal in the Linux community. CentOS 7 will no longer receive updates after June 30, 2024. So, if you're using CentOS 7, you might want to consider upgrading soon.
CISSP is a world famous information systems security professional certification from an organisation called ISC2. CISSP stands for Certified Information Systems Security Professional. For more details refer to _Information_Systems_Security_Professional and
There are 8 domains. These are:
Security and Risk Management
Asset Security
Security Engineering
Communications and Network Security
Identity and Access Management
Security Assessment and Testing
Security Operations
Software Development Security
Security Consultant
Security Manager
IT Director/Manager
Security Auditor
Security Architect
Security Analyst
Security Systems Engineer
Chief Information Security Officer
Director of Security
Network Architect
Candidates must have a minimum of 5 years cumulative paid full-time work experience in 2 or more of the 8 domains of the (ISC) CISSP CBK. Candidates may receive a one year experience waiver with a 4-year college degree or regional equivalent, or additional credential from the (ISC) approved list, thus requiring four years of direct full-time professional security work experience in 2 or more of the 8 domains of the CISSP CBK.
You should have a basic understanding of Information Technology and an attitude to study hard to pass the CISSP. There is no minimum knowledge level required. You will learn concepts as you study for CISSP. If you have questions on this, please connect with us at
in...@cm-alliance.org
All exams have a different focus.
If you work in IT Audit, you must clear CISA as a priority first before CISSP.
If you are a manager in Information Security, you can pursue CISM or CISSP.
If you are a strategic security program manager, you may target CGEIT.
If you are a mix of audit and governance, you should target CRISC or CISSP.
If you are working in consulting in cyber security, you should target CISSP.
3a8082e126