Saturday September 19 is our first Group Mock Exam Day, and I want the whole group in on it. Here is the plan. On September 19, cissp.app is open to everyone, free, no subscription needed. Midnight to midnight Eastern you can sit a real adaptive CISSP mock exam, 100 to 150 questions, up to 3 hours, the same engine paying members use, and get a domain-by-domain breakdown at the end. You will be working from a new curated question bank built for the day: 500 questions across all eight CISSP domains, 100 easy, 250 medium and 150 hard, updated for ISC2's official AI exam guidance published September 1. It stays in cissp.app after the event. Kickoff, Saturday 3:00pm Eastern. We will host a live kickoff on Google Meet, the link is in your enrollment confirmation. Log in together, last-minute questions, then everyone goes and sits the exam. If you cannot make 3:00pm, you can start any time that day. Everyone who signs up goes on the public board at cissp.app/mock-exam-day, and as the day goes on it shows who has started and who has finished. Real names or a handle, up to you. No scores on the board, just who showed up and who finished, which is the part that matters. Afterwards. Take your weakest two or three domains to a study group session the week after, while it is all still fresh. Bring someone! The day is open to everyone, so send cissp.app/mock-exam-day to anyone you know who is studying for the CISSP. No subscription needed, and they will not be sitting it alone. Sign up now at cissp.app/mock-exam-day so your access is ready when the day starts. Then comment below with "I'm in" so we can see who is coming! If you have been putting off finding out where you actually stand, this is the day we can all do it together.

A business partner requires an always-on site-to-site tunnel into a shared application segment. Their security posture is unknown, and the contract is already signed. What should the network security manager do FIRST? A. Terminate the tunnel in a dedicated screened segment B. Assess the partner's security posture against connection requirements C. Route all partner traffic through the inspection stack D. Enforce mutual authentication and approved cipher policy (Explain your answer for more points in the comments!) Come back for the answer tomorrow, or study more now!

A business unit deploys an AI agent that autonomously negotiates vendor contracts within predefined spend limits. The agent improves efficiency but occasionally commits the company to unfavorable terms. Executives want to continue using it. What is the MOST appropriate action for the security leader? A. Disable autonomous execution and require human approval for commitments B. Update the organization’s risk register to reflect agent decision authority C. Require explainability reports for every AI-driven contract decision D. Transfer contractual risk to vendors through revised legal language Come back for the answer tomorrow, or study more now!

After a merger, two companies federate identity systems to allow cross access to shared applications. An incident later reveals one company’s disabled accounts remained active in the partner environment. Both sides claim the other owns deprovisioning. What is the MOST appropriate control to establish FIRST? A. Enforce shorter session timeouts across federated applications B. Implement continuous access monitoring with anomaly detection C. Define authoritative identity ownership and revocation responsibility D. Require periodic manual access recertification for all shared users Come back for the answer tomorrow, or study more now!

If you missed it last time, May Brooks is graciously welcoming CISSP Study Group members back into her CISSP Masterclass! Completely free! This live session will be held on: Sunday, December 7th — 7:00 PM to 9:00 PM *Dubai time* (please check your time zone conversion) May is one of the most respected CISSP instructors worldwide. She’s an ISC2 Board Member, co-author of the Official CISSP Study Guide, a TEDx speaker, bestselling author (Scams, Hacking, and Cybersecurity). Having her open her masterclass to our group speaks volumes about the reputation you all have built here. Here’s what this means for you: 📚 Free Access to Mae’s Masterclass – If you’re serious about passing the CISSP, this is one of the most valuable sessions you can attend 💡 Ideal for All Levels – Whether you’re early in your studies or testing soon, Mae’s perspective will give you insights you won’t get anywhere else. 🤝 Community Recognition – May specifically wanted our study group to join because she believes in what you’re building here. See you there! Link & Access Info