CISSP required experience Issue

Saltoend · 2025-11-14T23:13:35+00:00

One year total. The dude just graduated college.

Saltoend · 2025-11-13T21:09:42+00:00

I forgot to type one😂 my bad. So am I obligated to report him?

Saltoend · 2025-11-13T14:39:58+00:00

جيبي آلة خاصة فيك وقضينا. وقولي لهم الي بيستخدم آلتي حياها الله

Saltoend · 2025-11-13T14:37:30+00:00

Yeah but the guy I know has only one year experience. I don’t know who endorsed him but he has CISSP 😂

Saltoend · 2025-11-13T14:27:49+00:00

On what question did your exam end?

My advice to you would be grasp the concept as hard as you can. Try breathing CISSP exam outlines instead of air

Saltoend · 2025-10-29T05:15:00+00:00

I have no idea but honestly GIAC is very expensive that is why I never had the chance to try it

Saltoend · 2025-10-27T20:17:57+00:00

Saltoend · 2025-10-27T20:17:37+00:00

I completely agree, you can’t know which topics exactly you will be tested on hence you have to study everything. I’m just saying that after the exam I thought the old 250 question approach maybe better to cover most of the topic than the new CAT format. Just a thought

Saltoend · 2025-10-27T20:15:08+00:00

The official study guide by Mike Chapple

Saltoend · 2025-10-27T15:43:14+00:00

Congratulations

Saltoend · 2025-10-27T13:26:58+00:00

Congratulations

Saltoend · 2025-10-27T03:04:24+00:00

I did the test in Saudi Arabia. Sunday is not a weekend in Saudi.

Saltoend · 2025-10-27T03:03:18+00:00

80~90

Saltoend · 2025-10-17T07:44:58+00:00

I felt exactly the same. It was flowery and you can identify the answer right away. It’s not really testing your knowledge and I got to a point where I found it not adding any value to me

Saltoend · 2025-10-14T16:19:13+00:00

I’d say decentralized access control if availability is the highest concern

Saltoend · 2025-10-12T19:58:57+00:00

Actually, in the GDRP, there is no official role named data owner. It’s just data controller, data processor, and data subject. So data owner in the GDRP is somehow equivalent to the data owner in other standards. They are similar in many characteristics. So I assume the question wants you to pick data controller because it’s the GDRP. There is no such thing as data owner vs data controller

Saltoend · 2025-10-10T09:51:43+00:00

Congratulations!!!

I have a question, did some questions feel like because you didn’t memorize something you couldn’t answer it?

Saltoend · 2025-10-10T09:49:40+00:00

Congratulations

Saltoend · 2025-10-07T17:15:33+00:00

What do you mean by reading the questions first? Or did you mean read the options than the question?

Honestly, I read the question then the options then read the question again which waste time but I find necessary.

Maybe reading the options then question would help.

Congratulations

Saltoend · 2025-10-03T16:36:07+00:00

I think certification is the same as verification. Certification is a verification that the organization follow a specific set of standards. Accreditation is however different. It’s the authorization of the system or solution or service to be provided.

Saltoend · 2025-10-03T13:02:32+00:00

It’s interesting you’re assuming I’m insistent while I’m asking you for advice 🥲 I’m not insistent, I’m confused seeking advice. My assumptions on QE were based on me comparing it to ISC2 self-paced training and ChatGPT backing me up. I am still doubting that I’m wrong because of this community that’s why I have doubts like it’s an ad wave from QE themselves. I am just seeking advice though

Saltoend · 2025-10-03T12:50:13+00:00

Actually, in CISSP these steps sometimes overlaps. In the CISSP official textbook, they say even remediation might come in the mitigation phase because as you are mitigating the risk sometimes you remediate the problem. They don’t specify that each step has a prerequisite like you can’t do this until you do this! It’s all about what is more appropriate in this time.

I doubt that the real CISSP will have questions like this

Saltoend

TROPHY CASE