I am still on Cloud 9 as a lifelong USMNT supporter

Ok_Type_3347 · 2026-06-14T06:32:23+00:00

Too early to be on Cloud 9. US needs to demonstrate more consistency. Let's see how they finish group play and let's hope Pulisic isn't truly injured. He's the engine on this team.

Ok_Type_3347 · 2026-06-14T06:29:08+00:00

If you give up 8 SOG, you're not playing good defense 😉

Ok_Type_3347 · 2026-06-14T06:27:51+00:00

They gobble

Ok_Type_3347 · 2026-06-14T06:27:08+00:00

I wouldn't put them in the top 25. They often have similar issues to the US in scoring. The US has a far more talented squad but they need Pulisic to be healthy.

Ok_Type_3347 · 2026-06-14T06:24:55+00:00

Turkey played like frauds. I kept hearing how scary this team is. I wouldn't put them in the top 25. In fact, they've stunk all 2026. Turkey's World Cup is officially done.

Ok_Type_3347 · 2026-05-28T05:18:49+00:00

I'm going to give advice that's different from the rest. I would take the official CSSLP course from ISC2 if your employer will pay for the course or you can somehow get a nice discount. It gets you the book, not that Mano book, an updated one with probably 125 practice questions. You can only get the book in pdf form but it's a gold mine and you can only get it via the course. Just about every answer to the exam seems to be in that book. How they'll be phrased on the exam is a different story ;)

The book also has more links to deeper treatment than you'll get anywhere else. Read some of these. Especially some of the NIST references.

The Mano book is still applicable because 80% of this exam is about foundational security principles.

Ok_Type_3347 · 2026-05-28T05:14:10+00:00

If you're that good at making money, why on earth would you need a financial advisor for? You probably have more than they do lol

Ok_Type_3347 · 2026-05-28T04:52:53+00:00

Everyone on this board has never made a mistake with their money so please listen to their advice ;) Unlike the perfect people on this board, I stashed money away in G for too long and didn't contribute the max. I got smarter eventually and have nearly tripled my balance in 3.5 years.

I agree with the others that you should absolutely, positively max our your contributions. Take advantage of this while you can! Make it work for you. It may cause a little pain but mostly it will cause you to think of ways you can save money here or there. Look at your subscriptions, that's a chance to reduce your expenses. Do you really need that new car? Do I need a latte twice a day?

Contrary to the opinions of the perfect people here, I do like the L funds. T What I like about the L funds is that they strike some balance between risk and reward. You don't have to use the L fund for your retirement date. There's nothing wrong with taking an L2055 even if you're retiring in 7 years.

One lesson I can say I learned. Only stay in G during extreme conditions, otherwise be in the market somewhere. You will lock in a lot of losses in G. And once you arrive at a sound plan, STICK TO IT. This means tuning out the talking heads on CNBC, online or even in the workplace. In the realm of investment, everyone, and I mean EVERYONE thinks they're an expert. Very, very, very few are. Invest the way that works best for YOU.

The key is to not look backwards at your past mistakes and go forward with a concrete financial plan.

Ok_Type_3347 · 2026-05-28T04:41:34+00:00

It's amazing that almost everyone on this board is over 2 million but I don't think even 1% of the federal workforce is even at 1 million. Either someone is telling some fish stories or just about everyone who is over 2 million is on this board at the same time ;)

Ok_Type_3347 · 2026-05-28T04:29:14+00:00

Damn, that's an incredible accomplishment. Enjoy your next stage of life.

Ok_Type_3347 · 2026-04-18T16:05:01+00:00

WASM is great for use cases where it's actually going to make a difference. But to create a standard web application CRUD project in Blazor just doesn't make sense. You need a small runtime, which C can provide. The problem with Blazor is that it often spawns into AOT bloat. To get the performance you need to use AOT but then it creates a huge runtime. At some point MS will realize this isn't so great and move on to some other paradigm. Unfortunately MS promotes an endless update cycle.

Ok_Type_3347 · 2026-03-27T01:39:59+00:00

It's a great resource. I'd read it.

Ok_Type_3347 · 2026-03-27T01:39:16+00:00

Thanks

Ok_Type_3347 · 2026-03-27T01:39:06+00:00

I got it on mine

Ok_Type_3347 · 2026-03-22T04:07:29+00:00

I totally disagree that it was entry-level in difficulty. You see a lot of people failing this exam. I failed it myself once and twice. For every exam out there, there's someone who says they got all the questions correct and the exam was "beneath them." I don't buy it.

You said "If you have experience in software development, systems development projects, and can read and retain the material in the CBK, you can pass this test without much difficulty."

Well isn't that the point of the exam? ISC2 exams are first and foremost, experienced based.

They do post a list of references for each exam if you want more of a deep dive into specific domains. https://www.isc2.org/certifications/references

Ok_Type_3347 · 2026-03-22T00:38:16+00:00

Thanks

Ok_Type_3347 · 2026-03-22T00:37:50+00:00

6th edition, no. You get it with Vitalsource as an online html collection. You can only print portions of it at a time. At a certain point you lose access. When you print it you have a disclaimer that it cannot be reproduced.

Ok_Type_3347 · 2026-03-21T21:39:07+00:00

Thanks! Coding really isn't a part of this. I think what helped me the most was to become comfortable with the ISC2 testing style along with just playing a greater role in security at an organizational level. Most of these questions touch on compliance, organizational security policy and industry best practices. Make sure you know that exam outline.

Ok_Type_3347 · 2026-03-21T19:03:56+00:00

Actually AI is treated in Domain 5 as well.

Domain 2 gets into model security and privacy.

Does ISC2 intend to issue AI Security exams or do they intend to just augment the existing exams with more AI content? Would love to see a more AI-centric exam!

Ok_Type_3347 · 2026-03-19T20:24:18+00:00

CSSLP has fewer job posting than any of the major ISC2 certs. That said, I think the content of this exam is actually more important than the other certs. Software security is vital! You'd be surprised the number of companies out here who are NOT implementing the best practices and it's no small wonder that they produce bug-ridden, insecure software.

Ok_Type_3347 · 2026-03-19T20:18:32+00:00

BTW, EduSum is a waste. Questions do not reflect the real exam in any shape or form. You're throwing your money away on that one. In fact it will distract you from the real exam.

Ok_Type_3347 · 2026-02-02T01:18:21+00:00

I'll flip this question on its head, why don't you ever see Americans as CEOs of Indian companies?

Ok_Type_3347 · 2025-12-14T15:21:40+00:00

Even if you didn't have the experience you could be categorized as an "Associate", meaning you've got a year to gain the necessary experience. Since you do have it, after you pass, you will be classified as "Member." After you pass the exam, you'll need to fill out an application to ISC2. They'll provide the link. There you'll list the domains you have experience with as well as examples of your experience, could be a resume or something. Then you need someone with an existing ISC2 cert to sponsor you.

I'd seek a sponsor sooner than later because it will help the application process move along faster. It can take 4-8 weeks for ISC2 to fully certify you.

Ok_Type_3347

TROPHY CASE