Customer Reviews

CISSP Practice Exams (All-in-One)

5 star:		(4)
4 star:		(2)
3 star:		(1)
2 star:		(2)
1 star:		(0)

 

 

I'm not one to write reviews prior to finishing the material, especially prior to taking the certification test that this book helps study for, but I purchased this book to help reinforce my knowledge of the material for the upcoming (1 month away) CISSP exam in my area and noticed there are no other reviews of this book. So, since other people may be purchasing this book very soon to help study, I figured I'd provide a little more information than what Amazon provides just to help guide people into making a wise purchase since nobody else is. So - is it worth it? Beats me, I'll update this in about 6 weeks. Here's what I can tell you so far:

The book itself is divided into one chapter each for each area of the CISSP exam. Each chapter has 25 questions in it, so there really isn't a ton of content in the book itself. What is nice is that every answer (A, B, C, or D) is explained in detail so you know why an answer is or isn't something, and that lengthy answer is why the book is longer than it otherwise would be with only 25 questions for each section. If this was the only content provided, the book would be an easy 1-star, pass and walk away recommendation - BUT it comes with a link to extra online bonus content which I feel (at least right now) makes the book worth my cash. Here's what's on the website:

1.5GB (~124 files) (~30-ish hours ?I think?) worth of MP3s which are recordings of Shon providing training to, well, me. I'm only through the first chapter, but she appears to be a good trainer and has a good voice (which, if you've heard bad audio trainers or audiobooks, you know will drive you crazy). I will continue listening to all of the other recordings (1+ hour drive to work everyday helps, lol), and I would recommend this resource to people. The one drawback is that the MP3s appear to be very dated. The modified date is from 2005 but in one of the recordings she references the soon-to-be-released Windows Server 2003 (HA!). That said, most of the material carries over from year to year all the same, but if you're looking for the audio training to mirror the newest objectives - look elsewhere. As I always say, this is a great supplemental material, but not "prime" material. I'm a fan of using a ton of supplemental material to get the biggest, overall picture anyway. If Shon or her publishers read this - thanks for the MP3s, they're great in the car!

The website also includes 3-4 online flash quizzes for each section of study (about 33 total quizzes, all said). Each quiz has approximately 50 questions, for a total of a ton of questions. Each question tells you once you submit it whether you're right or not and why (although it doesn't break it down into why each individual answer is wrong like the book does). I prefer to know the answer right away, so I'm glad it doesn't make me wait until question 50 to learn the answer to question 2.

If you can't tell by now, so far I think the book is a good study aide. I'll update this after I take the test to let you know how well it helped, and whether or not the questions were similar in content/context/writing than the actual test. In my opinion, knowing how the question is written is nearly as important as knowing the answer to it. It's amazing how difficult you can make an easy question just by wording it in an awkward way. For now - I'm happy I got this book & would recommend it to others. Sorry for being so wordy.

***UPDATE***
After a few weeks, I continue to agree with myself that this book is overpriced for the print-content alone. Q&A is good, but it all sums up to the size of one practice test. I might pay 10 bucks for that content, but not what the current price is. I also still agree with myself that the online content makes this book worth its retail price, but I have two complaints about the online content & need to append my previous comments about the online Q&A interface. First - after you answer one question, but before you move on to the next, the system tells you if you're right or wrong. If you're wrong, it provides an explanation. What's odd is that the explanation doesn't actually say what the right answer is and very frequently you still can't tell from the explanation given. No problem, you think, it's cool, because after I complete the test I can go back to the previous questions and see what the correct answer is. This is correct because, once the test is done, you can select a previous question from a drop-down list and it'll have a red X next to your wrong answer and a green check mark next to the correct answer. Problem here (my Second complaint) is that now that you can see the correct answer, there is no way to bring up the explanation of the problem again. So, if you don't remember the explanation 50 questions and an hour later, you're really out of luck.
Summing up this update - I think the programmers & editors dropped the ball in the 2 mentioned usability aspects of the online Q&A software. It works, but can be frustrating quite often. This doesn't kill the deal, or my rating (still 4 out of 5 stars), but it is something they should work on for future versions.

Shon Harris is one of the premier experts in the field, there's no doubt about that. But this particular resource is kind of a duplicate effort with an added feature: this is much more frustrating than it needs to be.

Anyone buying this book will use it primarily for the online tests. They're by and large the same questions, but of course there are more of them. The online questions are actually almost exactly like the Total Tester questions that can be found on the CD that comes with the complete All-In-One Exam Guide. If you've bought that, you're probably covered.

The frustration comes in the GUI employed to display the questions and grade your responses. First, all the clicking every time you mouse over anything is annoying and bush-league. You need to shut your sound off. More importantly, if you answer a question incorrectly, in many cases Shon tries to get so cute with her explanations that you cannot glean the correct answer from all of the verbiage. In several instances the GUI indicated an incorrect answer and then clearly displayed the exact answer given as the correct answer. The occasional grammatical error can be forgiven (though if an editor was employed on this project it should not be), but out and out mistakes in the grading functions are inexcusable.

Buy her All-In-One Exam Guide and take a review class. Consult other resources like the Official (ISC)2 guide. Do the practice tests that come with the CDs found in both of those resources. I'm sure that readers can find some value in this book and the accompanying online content...certainly the lion's share of the questions are graded correctly, but I'm not sure there's enough value to justify this book when you've got Total Tester as a part of the All-In-One Exam Guide.

The book I got was missing 33 pages. Then a few pages later there were repeated pages. Definitely slipped through the Quality Assurance procedure.

These questions helped me learn the material and solidify the knowledge that her main study guide taught me but don't use this source by itself. This is a great additional resource but you'll need another book to pair it with like Shon Harris' main CISSP All in One study guide to actually learn the information you need in the industry. The explanations for these questions are long and comprehensive in order to give you a thorough understanding of the material that she presents.

I found this helpful for brushing off my CISSP-related knowledge, although I'm not sure how close the practice questions are to the real exam (since I have no need to take the test). Some of my employees who did use the book to pass their CISSP certification did say it was helpful, but they also supplemented their training with a number of other books.

In any event, I like Shon's style of writing, and I recommend this book as a supplement to her CISSP Bible.

This volume is useful for preparing for the exam, but there are just too many doubtful answers. There following is a few examples:

For the question "Certain types of attacks have been made more potent by which of the following advances to microprocessor technology?", the given answer is "D. Increases in processing power". However, "C. Direct memory access I/O" is also an answer because DMA IS indeed a feature of the microprocessor and some systems are indeed susceptible to the "DMA attack" (search Wikipedia). In other words, DMA attack does make memory-based attacks more potent.

For the question "Which of the following is a common association of the Clark-Wilson access model?", the given answer is "D. Subject and application binding". However, "B. Access tuple" is also an answer, because an access triple is also an access tuple; a triple is a 3-tuple.

I really like this book.

It is well-organized and easy to read.

Most of all, it helped me prep for the upcoming CISSP exam.

I picked up this book a few weeks ago and so far, I think it's great. On the other hand, it was written by Shon Harris so what did you expect!!!

Ray

All ten CISSP domains, from access control and cryptography to business recovery, application security and information security, are covered in this fine guide to the IT security test, written by an IT security expert. Hundreds of practice exam questions are based on the latest release of the CISSP exam, with explanations accompanying answers to aid in comprehension. A 'must' for any CISSP exam taker and reference collections catering to them.