Cissp Certification All In One: Exam Guide (Anglais) Relié – 1 juin 2003
Descriptions du produit
Aucun appareil Kindle n'est requis. Téléchargez l'une des applis Kindle gratuites et commencez à lire les livres Kindle sur votre smartphone, tablette ou ordinateur.
Pour obtenir l'appli gratuite, saisissez votre adresse e-mail ou numéro de téléphone mobile.
Détails sur le produit
En savoir plus sur l'auteur
Dans ce livre(En savoir plus)
To properly study for the Certified Information Systems Security Professional (CISSP) exam, you must read a stack of books to ensure that you have studied all the necessary areas this test covers. Lire la première page
Couverture | Copyright | Table des matières | Extrait | Index | Quatrième de couverture
Commentaires en ligne
Meilleurs commentaires des clients
Commentaires client les plus utiles sur Amazon.com (beta)
I've just got a confirmation that I passed the test, and I used only this book for studying. So that books is definitly not a joke and can get you through.
Why the reviews are so different?
First, the author's style. It's more like recorded lectures then a reference. The author included some jokes and funny examples. They are perfectly correct, not abusive, they add some spice to a highly proffesional text and I personally love them because they make reading that huge book not so boring, but looks like the fact the style is different drives some people mad.
Second, the nature of the exam. The covered area is very wide and includes more topic then most people normally know and use. So many readers think the topics they know the best could be written better. The problem is because of so wide coverage you can not go deeper then a certain level. The book is almost 1000 pages long and I personally think it's well balanced and provides adequate knowledge for the test. Yes, some chapters could be extended but then you'd be overwhelmed by the volume and I doubt it would improve your passing score significantly.
Some people complained about mistakes. Well, it's true, there are some. But, it's the same idea here. They are not crucial and don't really affect your score much.
It's like if you need to get to the airport and you friend offers help you don't really care what car he has. But if you go to dealership to buy a car every minor option gets so important. Same idea here. If your goal is to pass the test, the book can be used as the only training material and provides adequate up-to-date information in a resonable volume for a pretty cheap price. The book does it's job and does it well. It also has some personality so you may love or hate it, but it's just your emotional perception. The knowledge is there.
CISSP test is very general (generic, and not for a specific product or service) and thus a frustration. But that is what CISSP is about. For professional and marketable working knowledge, use this book as a framework, along with many other good books such as (1) Incident Response (by Mandia & Prosise) and (2) Hacking Exposed (2nd ed, by Scambray, McClure, Kurtz) or (3) Maximum Security (3rd ed, Anonymous), or (4) Counter Hack by Stoudis, to supplement the reading and case study.
Now here are a few tips about how to study and pass this exam effectively. Good and bad things have been said about Shon Harris's book. Most of the time people are happy with the fact that this book is a one stop shop and covers the entire curriculum quite comprehensively. Likewise, most of the time, people are frustrated by the bad jokes and the poor editing. Both charges are true. This was pretty much the only book I used to study and though I did peek into Ronald Krutz from time to time, I found that Krutz is not only a drier textbook but also that it covers a lot of detail that goes beyond the scope of the exam. For instance in the cryptography chapter, Krutz goes into the details of the algorithms in some depth that this not required for the exam. So, after all it is true that Harris's book is "All-in-One" as it claims to be. It is however entirely true that the editing is shoddy. Other people have said in their reviews that Shon Harris's lighthearted writing style makes the CISSP preparation a lot more bearable. While its okay to be light hearted and humorous, it is quite frustrating to sit down at home after a day's work at the office and have to wade through half a dozen pages before she gets to the meat of the matter. With some intelligent editing, the number of pages in this book can really be cut down by at least a third. Because of this rambling style of writing, so much of the truly useful information has been relegated to the appendices in this book. So after all this bashing, should I buy this book or not, you ask? Yes, you should buy it. Not because it is flawless but because the other books are a little more flawed than this one!
So what do you do about the long winded writing? Take notes. That way you dont have to wade through it again when you are looking for some particular piece of information the day before the exam. I took about 200 pages of notes as I read this book. The summary at the end of each chapter is very succinct, so between the summaries and the notes, I was able to revise the whole book in a couple of days just before the exam. This was truly helpful. This is probably just my style but taking notes also drove the concepts down deeper into my memory.
While it may be possible to pass this exam with just this book, you'd be well advised to try a few practice tests. I got Boson's six tests but used only three. I have complaints about the quality of the Boson tests. Several of the questions were very badly framed, some of them were out of the exam's scope and many explanations were unconvincing. Some of the URL links in the explanation were broken. There is a feedback menu item on the Boson test that I used extensively to tell them they need to improve but I know other people have done that and it is not clear Boson actually takes this feedback seriously. Despite all these complaints, I think the tests helped. Boson allows you to take the tests in chunks of sixty questions each and that helps because you don't have to set apart 6 hours at once to take the entire exam. It also helps that Boson splits your score by domain and shows you clearly where you need to improve. So despite all the deficiencies, try Boson. I have also heard from other CISSPs that PrepLogic has a good set of questions that mirror the real exam quite closely and you may want to try that out too.
The other study tool I used was Shon Harris's 3-DVD collection and this in my opinion is a total waste. You cannot use it as a standalone resource to pass the exam though it is mostly a summary of the concepts covered in the textbook. There is an occasional video that helps you understand concepts better but for the most part, you just have Harris's talking head and deadpan voice. This may have been useful if it had been an audio CD instead, at a fraction of the price.
A lot of people also have good things to say about [...] which has a CISSP discussion forum, free reading material and free practice tests. I didn't use it at all and was still able to pass but it'd be a good idea to check it out.
Good luck with your CISSP.
The All-In-One guide seems to have an amazing amount of coverage over the concepts ISC2 indicates in their outline of topics that is on the exam. It seems like 10-12 books have been combined into one, which makes it a lot easier to understand and digest.
I am very appreciative that this book is available for me.