CISSP All-in-One Exam Guide, Third Edition (All-in-One) (49-121) (Buchabschnitt)

If you are trying to "brute force" yourself through this exam by taking an academic approach to the CISSP, then I don't think you will find a better core study aid. I caution, however, that this "All-in-One" cannot possibly fill an experience void. Without SOME experience in AT LEAST three domains, I think the vast majority of those who fall into this category will find it extremely difficult to pass the exam (as it is designed), no matter how many guides are read. If you have minimal to intermediate experience, then you will have a fighting chance with just this book (if you only have the time for one). In the end, I would claim that the "All-in-One" billing is only applicable to the seasoned veteran (i.e, 10+ years). As such, only the truly experienced can comfortably go into the exam having reviewed from only one source.

The reviews are definitely mixed on this book - you either love it or don't. It was recommended to me by our CISO and although I tried to take the easy way out by reading CISSP for Dummies, I didn't feel prepared. The size of this book intimidated me. However, it was amazing how much of an easy read it was. Shon has a wonderful writing style that took dry items such as Cryptography and made them interesting. I also benefited richly from the practice exams on the CD.

Did I read other material? Sure, I took CBT's and read online docs, but this was definitely an All-in-One kind of book. It has more shelf life than just for passing the exam -- I can use it for futher research.

Taking the Shon practice exams led me to believe I was ready to sit for the actual exam. And after the exam, I was sure I didn't pass. But as fate revealed, I passed. Which confirmed to me that all that reading stuck in my head and was instinctive. You can't memorize that much stuff. I credit her writing to making me relate to the topics.

Looking back, would I read anything different? No, this was the book for me! I wouldn't have wasted my time with the Dummies book and I would have practiced with the ccure.org tests more. But I'm happy I made the choice to buy this book.

Good luck!

I think this book is excellent. The CISSP exam is not for novices. If you don't really know what you are doing with regards to information security, you shouldn't be taking the CISSP exam anyways. If you do know what you are doing, but maybe you need to brush up on a topic or two, this book is perfect.

Gerald Quakenbush
CISSP, NSA-IAM
Author of "Web Hacker Boot Camp"

Will this book get you your CISSP? Probably, but I can't confidently say that.

I sat for an passed the CISSP exam using this book as my only text resource. I also used the free question database on cccure.org. After sitting on the exam, it's my strong suggestion to get a supplement such as Krutz and Vines. I came into the CISSP with a network engineer background and definitely don't fit the management profile. Aside from the telecommunications and cryptography domains, most of the material was quite new to me.

This books' major weakness is access controls and business continuity (contingency planning in particular). I found myself fudging through a lot of material on the exam that I didn't recall seeing in this book, and I took meticulous notes.

The strength is definitely the cryptography chapter. It is well written and makes a complex topic seem effortless. Overall the book strikes a good balance between the target audience (40 somethings in some sort of information management) and enough technical detail to get a feel for the "how." I'm in my early 30's, but most of the folks taking the exam with me were 40's and early 50's. The book seems to be written for them.

At times Shon goes into an awful lot of detail - fine for general knowledge, but it may be overkill for exam prep purposes. I am keeping the book as reference so it works out fine.

The book was worth the money and the included CD-ROM also helps you to prepare. I didn't give it five stars because some material was too thin, but it is definitely a very helpful resource.

Do not buy this book, SHON HARRIS is the worst writer in the history of CISSP prep. Her questions do not reflect the test. I know I just took it and failed. Get the official book form ISC(2) don't waste your money or time on this book. The data is old and the questions are not anywhere near what is on the test.