Activity
Mon
Wed
Fri
Sun
Dec
Jan
Feb
Mar
Apr
May
Jun
Jul
Aug
Sep
Oct
Nov
What is this?
Less
More
203 contributions to CISSP Study Group
Pass Exam @100Q
Hi all, I’d like to share my exam journey to help those who are currently preparing for it. First of all, I purchased the Peace of Mind (POM) voucher, and I highly recommend it to everyone. During my preparation, I felt mentally exhausted at some point, so I decided to take a step back and consider my approach. One thing that stood out from my exam experience was the number of technical questions, which was significantly higher than I had anticipated. I eventually passed the exam at 100 questions. Interestingly, there were still technical questions, but the overall balance seemed more focused on managerial and scenario-based questions. I also read the OSG cover to cover to identify my knowledge gaps. Although it was helpful, I wouldn't recommend going through the entire book unless you really need to. This is where I spent most of my preparation time without getting the best return on investment. Practice Questions – The Most Important Part of My Preparation Here are the resources I used, All of them added something valuable to my preparation. 1. Quantum Exams 2. Prep IQ Practice Questions (From Udemy) 3. Cissp Study Group & cissp.app 4. DestCert Mobile App A Few Final Tips - Get the Peace of Mind voucher. Knowing you have a second chance takes away a significant amount of psychological pressure during preparation. - Don't spend all your time reading books. Focus on practice questions, understanding the reasoning behind each answer, and identifying your weak areas. - When you finally sit in that exam chair, treat it as your only shot. Trust your instincts when answering scenario-based questions. Don't overthink things, and remember that understanding the mindset behind the questions is just as important as knowing the material. Good luck to everyone preparing for the exam! <3
1 like • 2d
@Security Pro Congratulations on passing the exam
CISSP Practice Question (Domain 4: Communication and Network Security)
A bank acquired a fintech and wants both networks joined in 30 days so staff can share systems. The fintech network is flat, runs legacy protocols and was never assessed. What should the security manager do FIRST? A. Deploy a default-deny firewall between the networks B. Assess the fintech network and define trust boundaries C. Segment the fintech network and retire legacy protocols D. Route cross-network traffic through the bank's monitored proxy (Explain your answer for more points in the comments!) Come back for the answer tomorrow, or study more now!
0 likes • 3d
The correct answer is A. Deploy a default-deny firewall between the networks. Why this is the FIRST step: - Immediate Protection (Risk Isolation): When connecting an unassessed, insecure network to a secure one, your immediate priority is to protect the bank's existing infrastructure. A default-deny firewall establishes a controlled barrier, ensuring no unauthorized traffic passes between the networks from day one. - The 30-Day Constraint: Performing a full security assessment, defining trust boundaries (Option B), and completely re-architecting/retiring legacy protocols (Option C) are necessary long-term tasks, but they take significant time. Placing a firewall allows the networks to technically "join" at the perimeter under strict, explicitly permitted rules while further assessment takes place. Why the other options come later: - B & C (Assess, Segment, Retire): These are critical next steps in the lifecycle of the integration, but they cannot be completed instantly. Until these are finished, the bank's network remains entirely exposed if a firewall isn't already in place. - D (Proxy routing): While monitoring proxy traffic is useful, a proxy alone does not provide the comprehensive, multi-protocol network isolation and packet-filtering capabilities required to secure an unassessed network running legacy protocols.
CISSP Exam Passed !
Hi Everyone, I Passed the CISSP exam on Saturday. I attempted the exam in April 2024 but did not pass. Before now I used the following study materials - Official Study Guide (OSG) 9th edition, Sunflower, Luke Ahmed's How to think like a manager, ISC2 official exam prep and few you tube videos by Andrew Ramdayal. Preparing for this attempt, I joined the CISSP Skool Community where I gave me access to all the CISSP test questions and answers with explanation posted by Vincent and most importantly I joined the daily collaborative learning link where I was privileged to study alongside folks like Ed, Matthew, Ricardo, Pavithra, Aidah. Vishal, David, Babar, Emma and others using numerous question banks. I believed this helped me expand my learning and sharpening my exam mindset. I found this write up for my last minutes study - Cleared For Wealth | Break into defense contracting and build real wealth in IT as posted by Chiru. I really appreciate everyone that has helped me accomplish this milestone, especially to Vincent for running such a wonderful platform.
1 like • 4d
@Kayode Alabi Congratulations!!! I am glad I could help you on your journey. Thanks for posting your resources that you used to pass the exam. Could you tell us how your plan of attack on passing?
0 likes • 3d
@Kayode Alabi thank you!
Question
A new cloud provider wants to provide cloud services to consumers in its local region. The company is currently marketing its service models and trying to attract prospective customers. Which of the following SERVICE MODELS can the cloud provider NOT advertise under their service offering? A. Cloud storage drive B. Pre-configured virtual machines to upload source code for the developers C. Ready-to-use virtual machines with no operating system and applications D. Dedicated cloud service made available to companies
1 like • 4d
@Tariq Islam Thank you very much!
1 like • 4d
@Rajdeep Ajmani A virtual machine cannot function or be advertised as a usable computing resource if it has no operating system installed. In IaaS (Infrastructure as a Service), virtual machines come with at least a base operating system image that the user can configure and build upon. the key word in your question is NOT...."Which of the following SERVICE MODELS can the cloud provider NOT advertise under their service offering?"
1-10 of 203
Ed Morawski
5
275 points to level up
@ed-morawski-4430
Ed

Active 9h ago
Joined Nov 21, 2025
Powered by