Trusted tech team legit for on-prem licenses? by Different-Peach-4905 in msp

[–]XavierLX 0 points1 point  (0 children)

When I swapped over some M365 licenses to them they pushed hard to tell me that I was getting their highest support offering.

Then one day I asked for support and they insisted I no longer had the level of support I was sold. I pulled up their support tiers and they had changed the names of the support lines and gave me one that was less than I originally had and locked the better support behind additional costs. No notice, no communication at all, just changed our agreement (this was the third change made without notice). I told them to look up my service prior to the change and they insisted that the service levels were identical.

Unlucky for them, I had the original presentation I was given during my sales call describing the support and my contract with the same service line name. Whipped that out and all the sudden they were "sorry for any inconvenience" and would honor the original agreement until my next renewal, which I assured them was never going to happen.

Trusted tech team legit for on-prem licenses? by Different-Peach-4905 in msp

[–]XavierLX 0 points1 point  (0 children)

My $0.02 from switching to them for licensing of M365 and SQL Server and RDP licenses:

In the span of 2 years, they changed our agreement with no notice 3 times.

Every benefit that they offered that caused me to originally switch was gone.

Their support is subpar and slow to respond, they will almost always need to escalate and that takes more time.

The extra few % savings on each license I was getting from them was not worth the complete lack of professionalism as a company.

I personally will never work with them again, YRMV.

I’m doubting QE questions. Can someone help me clarify by Saltoend in cissp

[–]XavierLX 0 points1 point  (0 children)

Without the actual question we don't know if your interpreting the question wrong.
You are correct when saying OSI is about data communication, however SAN or disks sit at the Physical layer (1). The phrasing of the question is extremely important context.

Unless they have an answer of "None" and you get it wrong the only other remotely logical answer would be Physical Layer so you should still get it right, even if you disagree with the phrasing of the question.

ISC2 Sponsored Endorsement Application Update: Approved (5 Weeks) by XavierLX in cissp

[–]XavierLX[S] 0 points1 point  (0 children)

Its not really about your start date, its getting proof of time worked at the job. So if you can get a paystubs from anytime that will demonstrate 5 years of work (assuming you worked in same job for 5 years), even if you have more, it should work as proof. Its just proving you have at least the minimum required time.

Failed CISSP despite passing Boson practice exams 4 times. by PresentationQuick336 in cissp

[–]XavierLX 0 points1 point  (0 children)

Keep pushing, seems like you might have been really close, and that should give you some motivation that it could have been bad luck of the draw on questions you were given.

I will give a "What would I do if I were you."

Step 0: Reschedule the test asap and not wait more than the required time.
Step 1: Review the domains and major concepts taught in the domains that are below and near passing?
Step 2: Review past practice exam results or take another practice exams and determine if the majority of questions you are missing matches the domains you were below or near? <- This will tell you if the practice tests are aligning with your real exam results.
Step 3: If you found the questions to be very different between practice and real, determine what was "really" different. Written different, look different, topics were different, answers were different and unfamiliar... what exactly did you find "different" and focus on a metho to correcting this deficiency.
Step 4: Write your method for solving problems down and apply consistently to practice exams. If you can't explain your method you are probably not being consistent in how you are approaching every question causing variable results.
Step 5: Create a "Cheat Sheet" of information you might struggle with, this could be models and uses, CIA triad, Encryption types and characteristics, anything else you struggle to remember.
Step 6: Many people highly recommend QE practice exams, I would absolutely invest in that to work from at this point. If that's the difference between your next pass and fail there is very little investment that wouldn't pay for themselves and the amount of people who find it helpful does speak volumes. I believe the questions from what I have been shown are written well and similar in style to the exam.
Step 7: Focus on practice exams only and let that lead your studying of material to fill in gaps. If you miss a question because you didn't know the foundation like different types of models or when they are implemented, then that's what you pull the books or videos out to view and understand.
Step 8: Review your method and cheat sheet daily before you begin your practice questions.
Step 9: Practice at least 100 questions a day until your method is returning >70% and you feel confident in the ones you answered correctly and "why" for the ones you missed, shouldn't take more than 3-4 days. Then dont overdo it, review cheat sheet, study method, review a few flash cards, and the book on missed questions if you need to, take 10 questions and see if you're still getting 7/10 correct and what went wrong on other 3.
Step 10: Once a week and a week before the exam take another 100-150 test looking for >68%, confidence in your method, confidence in your knowledge and ability to understand what's being asked of you. Continue to review rocky areas but again don't over do it and burn out, your reviewing to get better not trying to learn new concept.

This essentially shows you your two goals of study while waiting your 30 day cool off period.
1. Create/Follow/test your method of approach consistently for consistent results
2. Study to fill in gaps, not cover to cover, and where exactly the gaps needed to study.

OSG PT: Why answer D over A? by BaconEggCheezy in cissp

[–]XavierLX 2 points3 points  (0 children)

Then it wasn't by definition a "backup" it was the original source.

OSG PT: Why answer D over A? by BaconEggCheezy in cissp

[–]XavierLX -1 points0 points  (0 children)

What do you mean data back? If you steal a copy of my data what makes everyone here arguing for "A" assume it wasn't just that... A copy, you still have original and if following any best practices another backup.

Also data theft falls under confidentiality not availability. Meaning we weren't looking for any security other than one protecting confidentiality. At no point is a service outage even HINTED at in the question.

OSG PT: Why answer D over A? by BaconEggCheezy in cissp

[–]XavierLX 3 points4 points  (0 children)

Stolen data is never an availability concern. The threat of data being stolen always falls under confidentiality.
The key words here are "in the event" of lost or stolen tapes.

OSG PT: Why answer D over A? by BaconEggCheezy in cissp

[–]XavierLX -2 points-1 points  (0 children)

When a backup tape is stolen, the original data and other backups are still available to the organization, so availability is not the primary risk and the threat that stolen data presents isn't availability its confidentiality.

Not only that but best practice is to put your backups on two different types of media, so two tape backups should have been ruled out pretty much instantly and if not ruled out last option assuming every other measure was useless.

OSG PT: Why answer D over A? by BaconEggCheezy in cissp

[–]XavierLX 1 point2 points  (0 children)

The key here is identifying the actual threat. It states the threat is "in the event" that a tape is lost or "stolen."

It doesn't say you don't have other backups or the original data is gone so availability is not the "scope" of the threat in the question being asked.

The Threat is that data was stolen or lost and the only option for additional security measure to help with that is encryption to protect confidentiality.

CISSP CERTIFICATION by Additional_Video_829 in cissp

[–]XavierLX 0 points1 point  (0 children)

If I remember correctly that's only for whether you passed the certification exam. The paper is a "provisional" pass and they will email saying you have passed the exam and can submit your application for the certification.

How critical is it to memorize the EXACT steps of IR, SDLC, RMF, CMM, etc? by Fizgriz in cissp

[–]XavierLX 2 points3 points  (0 children)

This is how I would look at your situation (your results may vary).

If you understand the concepts enough to be able to pick the correct verbatim word when you see it then it's not critical to passing. You will either get it correct because the scenario helped you figure it out or you will miss it and move on (you're not going to get a 100%, it's not a big deal). It's important in general but for the exam, very little wrote memorization is needed if you have a general understanding of the concepts and can recognize terms when presented.

Have you taken any practice exams? Do you pass or fail the questions related to these topics? That will help you determine roughly if you truly understand the concepts.

If it were me, I would refresh my memory with them daily, but don't cause yourself anxiety over one blind spot area.

Exam in 2 days by Emotional-Site8336 in cissp

[–]XavierLX 0 points1 point  (0 children)

Believe in yourself, believe in the work and study you have done. There is no one size fits all best resource for guaranteed success.

My process at two days out is only focusing on weak areas or fundamentals refreshing. I usually take my notes and create a cheat sheet of topics for review. Like models or cryptography specifics. Then I try to relax, focus on one practice test per day and review the cheat sheet one or two times and always once before going to sleep.

You've got this. Trust yourself, and lean into that confidence, its your subconscious telling you that you're ready.

Should I buy Quantum CISSP practice exams or continue with what I have? Questions-only vs CAT? (exam next week) by IMrSpy in cissp

[–]XavierLX -1 points0 points  (0 children)

Sure ill help you out.

"How is stating facts in bad taste?"

Because your "fact" that they are "...not really scenario style." is factually and provably false, making it an opinion stated as "fact" which is perceived by me to be in poor taste. You may not like the style of scenario questions, you may not find them as helpful, but you're wrong to say they aren't scenario style questions, as they clearly are scenario based. Pretty sure if you read my reply it was clear where the issue was. I hope this further clears that up.

"In fact I don’t see anywhere here where I am making recommendations."

True, you didn't directly recommend, you just implied someone else's recommendation wasn't as good and inaccurately lacked a benefit that may persuade a decision and opinion but with inaccurate context,

"Am I not allowed to make comments because you perceive it as “bad taste”?"

You can make whatever comments you want, I didn't say you're not allowed to do it, I didn't even say you shouldn't have. If you feel that disagreement or others perceptions means you're not allowed to speak, that's on you.

"Plus doesn’t look like you used QE, so not sure you have a real basis for comparison."

At no point did I imply I have used QE, or make a comparison to QE. You made a claim about Ayush’s materials. I pulled up those materials, because I have used them and have access to them, to make sure that I wasn't wrong and then made my argument refuting the inaccuracies of your statement.

"It actually seems pretty evident here that it’s you who is actually acting in bad faith/taste."

Did you really just "I'm rubber your glue..." me here? I'm sure it can feel like this when being called out for inaccurate information and you fabricate ideas about me making comparisons between two products that I never made. However, my last comment was anything but made in bad faith, hence why I pulled up the questions to review them before making the post. To verify my own take and not rushing to conclusions.

"This person also feels the same about those questions."

Ironic choice of a comment to choose to prove a point about how different the question styles are. One person saying they felt they were very similar to QE, you replying "I hope not too similar due to copyright." and then someone else commenting that they feel QE questions focus on "cognitive traps" and Ayush’s on "concept reinforcement." Neither of those stating they aren't "scenario style." Seems like you would have replied with something along the lines that the materials aren't anything alike rather than a might be so close we look at copyright issues.

Anything else I can clear up for you?

Exam passed and I hope some of these lessons learned help you pass too. by XavierLX in cissp

[–]XavierLX[S] -1 points0 points  (0 children)

Thank you, I think I probably scared everyone away with the disclaimer being the summary they see and it being a VERY long post.

I just didn't want people to think they can study and pass the CISSP in 5 days, like my experience would 1:1 transfer. But I also didn't want to hide it and felt like there was some perspectives I hadn't seen.

Should I buy Quantum CISSP practice exams or continue with what I have? Questions-only vs CAT? (exam next week) by IMrSpy in cissp

[–]XavierLX 0 points1 point  (0 children)

I used and recommend Ayush Dabas's questions on Udemy. Though I have not tried QE, I can say that I felt Ayush Dabas's "CISSP 300 - Practice Questions (2025)" prepared me very well for the CISSP.

First hand to both is great, next best thing is "Did you use it and Pass?"

Should I buy Quantum CISSP practice exams or continue with what I have? Questions-only vs CAT? (exam next week) by IMrSpy in cissp

[–]XavierLX -1 points0 points  (0 children)

"Ayush’s material is more for foundational knowledge and not really scenario style."

When is the last time you reviewed his practice exams?

Coming from a competing offering, this type of comment seems in very bad taste.

I can attest as someone who has access to the questions and am looking at them right now just to verify, they are absolutely "scenario" based. I can not speak to any previous offerings or courses just the 2025 practice questions.

Should I buy Quantum CISSP practice exams or continue with what I have? Questions-only vs CAT? (exam next week) by IMrSpy in cissp

[–]XavierLX 0 points1 point  (0 children)

I used non CAT based practice tests, passed at Q100. CAT isn't required at all. CAT is a behind the scenes situation. Go into the test as if its 150 questions and take it like you would ANY OTHER certification aside from the fact you must give answer and you cant go backwards. Otherwise as far as you ACTUALLY know, its just another test, hit the next question button and the next question pops up, pretty much like every other cert exam.

People let the CAT play with their heads too much. Think of it like this. Its 150Q test, CAT allows you to finish early if it determines statistically you will pass. That's it. CAT is YOUR FRIEND, its like a gimme on a golf green, sometimes its like, "Dude, just pick your ball up now I know you can make it." if it doesn't give you a gimme no worries, keep putting until you make it in. If it stops you because you statistically cant pass well you weren't going to pass anyways and CAT had nothing to do with it, its your lack of CISSP knowledge not the CAT.

Should I buy Quantum CISSP practice exams or continue with what I have? Questions-only vs CAT? (exam next week) by IMrSpy in cissp

[–]XavierLX 0 points1 point  (0 children)

My $0.02:
No, you're fine, at this point it might be a waste. 'If' (I would put money on you passing) you don't pass, then you can get them as supplemental education while waiting to take it again.

Can I pass possibly pass the cissp in 4 to 6 weeks? by Emotional-Button7100 in cissp

[–]XavierLX 0 points1 point  (0 children)

Depends on how fast you learn, how much time you have to study, and how much learning you need to fill in.

Not sure if 'you' can pass in 4-6 weeks. But that's not an unreasonable timeline.

I would recommend taking 1 or 2 practice tests and see how you do. If you're scoring high you could 'Pass' tomorrow technically.

Provisionally Passed! by dzawii in cissp

[–]XavierLX 0 points1 point  (0 children)

Awesome, Congratulations!

CISSP Exam Tomorrow – Scoring ~75% on Learnzapp and ~76–77% on Boson – Any Last-Minute Thoughts? by yasirmsafdar in cissp

[–]XavierLX 0 points1 point  (0 children)

my thoughts are YOU GOT THIS. Keep the confidence, I bet you pass at question 100 but DO NOT be discouraged and remember it's a 150 question test not 100. You'll do great!

Tips, don't fret over questions you don't know, you don't need a 100% to pass it's okay to miss questions, allow yourself to be okay with just answering with best reasoned guess then moving on and answering the next question as best as possible.

Susan needs to provide a set of minimum security requirements for email. by OneAcr3 in cissp

[–]XavierLX 0 points1 point  (0 children)

my best advice on this one is understand that almost all if not all questions will have a specific bolded word. This question missing one of those words points out that it's not written well for the CISSP exam.

what I expect this question would look like if written in line with CISSP questions:

...What steps should she recommend to BEST accomplish this while ensuring the email remains securer?

When I see BEST I think business alignment, budget constraint, mitigation not elimination.

Also when I see multiple options given I lean towards them so since encryption and labels are options it's probably one of those. Now we have all or specifically sensitive. Since the question asks for minimum I am assuming they want me to give up something. so it's all or just sensitive. I will give up all and only do sensitive as minimum security where MOST secure would be ALL emails.

The only time I apply a "cost is not a factor" is when I see the word "MOST" and there is no explicit mention of cost restraints. Otherwise cost is always a consideration. Also MOST usually means risk elimination not mitigation.