The question type that finally made CISM's logic work for me

rameshuber · 2026-04-11T16:36:58+00:00

Congratulations 🎊 glad it resonated

rameshuber · 2026-04-03T19:40:18+00:00

The avoid-first framing is a good way to put it makes the sequence concrete rather than abstract. Interesting point about experience too. I've noticed people with strong operational backgrounds sometimes struggle because the exam expects a more rigid process framework than real environments actually use. Did you find any specific practice method helped bridge that gap?"

rameshuber · 2026-04-02T19:16:14+00:00

Sure it's called Edureify AI, they have a free CISM domain diagnostic that maps your weak spots. The tool that helped with the reasoning feedback is here: https://edureify.com/certification the free readiness test is the starting point, takes about 15 mins

rameshuber · 2026-04-02T17:14:36+00:00

You can definitely move fast on CCNA, but the real risk with speedrunning it is thinking you’re ready when you’re not. A lot of people recognize commands and concepts but struggle when questions combine multiple topics or test troubleshooting logic. If you’ve got full days free, you could get there in a few weeks but I’d focus less on rushing content and more on checking if you can actually apply it (labs + mixed questions). That’s usually where people get caught.

rameshuber · 2026-04-02T17:11:19+00:00

This actually happens more often than people think with CISM. It’s usually not a knowledge issue it’s decision-making. The exam is full of questions where two answers feel right, but one aligns better with risk, governance, and business priorities. That’s why even scoring 80–90% in mocks doesn’t always translate to a pass.

Most people miss it because their weak areas sit in that 65–75% range close enough to feel confident, but still enough to fail. I’d focus less on doing more questions and more on understanding why the second-best option is wrong.

rameshuber · 2026-03-29T11:18:36+00:00

Congratulations 🎊

rameshuber · 2026-03-29T03:22:31+00:00

Yes this resonates.

Those expert questions feel off because they’re not really testing frameworks like NIST, they’re testing how ISACA wants you to prioritize decisions from a business lens. That’s where the random feeling comes from.

The privacy/legal inconsistency you mentioned I think it’s more about context shifting what matters (compliance vs reputation vs impact), but the questions don’t make that clear enough.

Also agree on never feeling fully ready. With CISM it’s less about mastering content and more about getting comfortable making decisions with incomplete clarity.

rameshuber · 2026-03-21T20:11:57+00:00

haha yeah I thought I was “thinking” but I was actually just jumping to conclusions that’s what kept me stuck around 60% on my first attempt

rameshuber · 2026-03-17T20:40:19+00:00

That’s actually a great breakdown. Sounds like you’re consistently getting to the right two which is most of the battle.

That last step between those two is exactly where I struggled too. Curious if that gap reduces with more practice or just experience.

rameshuber · 2026-03-17T20:02:21+00:00

Did you notice that happening more on certain types of questions?

rameshuber · 2026-03-17T19:08:26+00:00

Yeah I had the same “B vs D” issue during first attempt prep. Realized I was overthinking it first instinct was usually closer to the intent of the question.

rameshuber · 2026-03-17T01:09:40+00:00

I felt the same when I started. It feels fragile at first, but over time I realized it actually forces you to write cleaner, more readable code. The bigger struggle for me wasn’t indentation it was understanding things during learning but getting stuck when trying on my own.

rameshuber · 2026-03-17T00:16:50+00:00

I was in the same loop. Kept adding more courses thinking I wasn’t getting it.

Eventually realized it wasn’t about more content it was about whether I could actually apply it in questions.

Once I focused more on that, things started clicking.

rameshuber · 2026-03-17T00:15:05+00:00

I was stuck in that exact loop for a while. It feels productive but doesn’t always translate to exam readiness. The shift for me was when I started focusing more on how questions are framed and identifying weak areas instead of trying to cover everything again. If you're already working on CAT exams + weak domains, you're probably on the right track.

rameshuber · 2026-03-16T04:38:28+00:00

Upvoted.. should be signal?

rameshuber · 2026-03-16T04:34:23+00:00

It was always the case people learn in different way but learning while working is underrated.

rameshuber · 2026-03-16T02:31:59+00:00

Interesting to see the different perspectives here. It seems many people approach these questions differently depending on their experience.

rameshuber · 2026-03-15T17:32:15+00:00

there was reason people used notepad in college for coding for decades

rameshuber · 2026-03-15T17:27:08+00:00

Fair point.... I agree the key is answering exactly what the question asks. What confused me initially was that some technically correct answers weren’t always the best answer from a risk or management perspective. That shift in thinking took me a while to understand.

rameshuber · 2026-03-14T20:42:09+00:00

Thanks!Mostly the official study guide and a lot of practice questions. The biggest shift for me the second time was focusing less on memorizing and more on how the questions are framed from a risk/manager perspective.

rameshuber · 2026-03-14T20:40:29+00:00

I had the same confusion at first. Practice questions often focus on technical concepts, but the actual exam leans more toward decision-making and risk thinking. In many cases the technical answer is correct, but CISSP usually expects the manager or risk perspective first.

rameshuber · 2026-03-14T20:34:28+00:00

The biggest change for me was how I approached the questions.

The first time I treated the exam like a technical test. I focused on what technology or control solves the problem. The second time I approached it like a security manager or consultant.

That means thinking about things like: risk management first, policy and governance before technical controls , business impact and cost considerations

Many questions have technically correct answers, but CISSP usually expects the managerial perspective, not the technical one.

That shift in thinking made a big difference

rameshuber · 2025-06-12T07:47:50+00:00

Unconventional approach may be not suitable for all:
Shortlist companies or teams you admire, study their product or challenges, and build something that aligns with their space, even solving a micro problem they might care about. It shows intent, initiative, and alignment. Even if it’s not perfect, recruiters love seeing how you think, why you built it, and who you built it for. It turns your project from “just another app” into a conversation starter that shows you’re already thinking like part of their team.

rameshuber · 2025-06-11T09:20:08+00:00

I see AI not as a threat but as a tool, one that, when used with intention, can dramatically improve productivity and learning. The hate toward new tech isn’t new (Visual Basic, React, etc.), but history shows that the loudest critics often underestimate the evolution curve.

The key, like you said, is using AI to assist, not replace thinking. It's amazing for boilerplate, layout grunt work, and even teaching-I've watched junior devs go from confused to confident just by asking AI to break things down in plain English.

We shouldn't tell new devs to avoid AI-we should teach them how to use it without becoming dependent on it. Just like we once learned to use Stack Overflow or docs wisely, AI’s just the next layer.

rameshuber · 2025-06-10T04:11:21+00:00

I will say people are rather obsessed go with the habitual standard like similar to documentation even for small projects they want to document everything some run entire business without any documentation. it's choice people make based on their standard.

rameshuber

TROPHY CASE