Hi and I wanted some advice from you people who have passed this exam I have booked my exam for August 28 and I will start my preparation from July 20. I was thinking about delaying the exam because I have seen a lot of people in reddit failing this exam and I think with more time for preparation I will pass it. But the thing is the exam will change and will add 2 new domains and I don't think old mock test and materials be enough.

In your opinion what should I do? Should I delay it or not?

Also from July 20 I can practice and learn CC courses 5 hour per day. I have no experience in cybersecurity or IT.

My exam is in 2 weeks and after reading all the reddit comments I have decided to buy Udemy thor course or Udemy subscription any one interested in buying together or wanna share creds i can pay half amount if not it's ok i will buy for me but I m open to buy on sharing basis. Thank you

Hi everyone,

I am an ISC (CISCE) 2026 student filling the Delhi University CSAS UG form and I have two doubts:

1. Class 12 Roll Number: Should I enter my UID or my Index Number in the "Class 12 Roll Number" field?
2. Theory & Practical Marks: My official ISC marksheet only shows the total marks for each subject. It does not mention separate theory and practical/internal assessment marks. I even spoke to my school's Vice Principal, and they said that CISCE does not disclose the theory/practical breakup.

So how are ISC students supposed to fill the theory and practical fields in the DU CSAS form?

If any ISC student has already completed the registration or has received clarification from DU, please let me know.

Thanks in advance!

Hi, I am planning to take the CC exam on August. I registered during the promo period so I did not pay for the exam fee, however I missed registering for the free training course (I thought it comes with the registration already). Can someone please help me share their notes, learning materials please. Or if this isn’t worth it to purse, please let me know too.

For context I work in IT Audit.

All your feedback will be appreciated. Thank you!

TLDR: The questions on the exam are vague. Beware.

So I spent a lot of time studying for this exam. I did the official self study (did not cover most things on the exam), Thor, github pdfs, kaplan flashcards with numerous "practice exams", youtube, and countless hours studying. I feel so cheated that I wasted time on this. This is not an entry level exam. I felt very confident going in as on the practice exams I was scoring 80%-97%. The material in the self study did not cover what was on the exam.

I had 125 questions so I thought I was passing towards the end. The questions had multiple right answers, so be very aware. Also the survey was timed for 3 minutes with 13 questions?!? LOL what's that about? The testing center was very loud as the proctor was on their phone the entire time with the sound on. Then their IT guy kept fumbling around with the old computers going in and out. Just a very bad time. Not going to retake.

Hey there, is my ISC2 Candidate ID the same thing as an ISC2 membership number? I'm attending a conference that is asking for my ISC2 membership number so I can get credit for CPEs and it can track my progress. Thanks.

I saw a reel on Instagram about a free certification, and my ears perked up on hearing free. So, I signed up for the CC certification, scheduled my exam, and started following the self paced module. I stumbled upon this subreddit the morning of the exam, and I read all the posts about the exam being extremely difficult and people failing. So I ended up at my test center with shaking hands, and even more freaked out in front of the computer. I did feel a little misled by both this subreddit and ISC2, so I'd like to share my experience and maybe put out some other people's anxieties.

On my pre-course assessment, I think got around 70%. I put off doing the rest of the assessment until 3 nights before my exam. Went through all the modules until I got "100% competency" in each, which surprisingly, you only need to cover about half the content in the module to achieve. That should have been the first red flag for me. I did the post-course assessment the night before the exam, got 85% and promptly fell asleep thinking I must be prepared.

As I mentioned above, I stumbled upon this subreddit the morning of the exam, looking for people's experiences and perhaps some sample papers. After reading a few posts, I skipped through a few YouTube videos and some notes shared in other posts.

The exam caught me off guard. A lot of questions had:

• terms I'd never seen before in the course
• questions with multiple possible right answers
• extremely vague wording

I would say the ONLY reason I passed is because I have what I learnt in both a Bachelor's and a Master's in Computer Science behind me. You cannot blindly trust the self-study course in your competency. If you really don't want to pay for the Udemy and other courses that are linked in other posts, please watch through some YouTube playlists about Computer Networking, Cloud Computing and Cryptography at a Bachelor's level at the minimum.

I'm not sure how they apply guess correction in the exam scores, but I was quite surprised that I actually ended up passing, considering another candidate failed right as I was signing in to the center.

I passed the ISC2 on April 2024 but I was only a sophomore then. I figured the 50$ was better off spending elsewhere, now that I'm about to find work I wanted to pay for the certification but it's asking me $135.00 to pay for the "Annual Maintenance Fee Professional". Is this on top of the 50$ for the ISC2? so I need to pay around $185 all in all? And is there a deadline for this, because I heard after a specific amount of years you need to retake it again.

My friend told me i could do it for free but i see $199 when i try to register. There are a lot of information on the internet claiming it was free. Is there any way i can do it for free?

Hello,
I took ISC CPA exam in April and scored 69. During the exam, I noticed many of the MCQs and simulations were not covered in Beckers. My Becker access has now expired, and I’m wondering whether I should renew it or purchase another review course instead.

Has anyone had a similar experience? If so, which review course would you recommend for ISC? Any advice would be greatly appreciated.

I am thrilled to share that I have passed the CC exam as part of the 1M CC 🥰

My strong background in IT Support Services paired with watching many, many Cybersecurity Talks gave me a solid foundation.

The training materials in the 1M CC self-study course were well written and incredibly helpful during my exam prep.

I got an 87% on the post-course assessment.

Hi everyone,

I have been lurking here for the better part of a year. The Reddit community was a major part of my research about preparation methods and as such played a large part in my success. Thank you. Now that I have passed the exam, I'm excited to have the opportunity to add my own experience to this community so that it might help others.

About me:

I have almost 20 years of experience from helpdesk to management in a variety of organizations from large, publicly traded companies to small nonprofits in the United States. The small nonprofit experience actually benefited me most as the scope of work, like the CBK, is remarkably wide. In small businesses, your helpdesk tech might also be the person configuring firewall rules and negotiating with vendors. I never finished college. I have no other certifications. The CISSP exam was the first test I have taken since high school.

My preparation:

I could say I have been studying for over half a year, but it would be disingenuous. My serious preparation only happened within the past 3 months. I am going to review the tools that I used, but I want to stress that what you are about to read is just one person's experience, and my needs might be entirely different than yours.

-Training Camp in-person class: I recommend this service especially if you are able to get your company to pay for it. I have heard people say that boot camps are designed to just teach you what you need to know to pass the exam and I was highly skeptical. In my experience with this boot camp, that is entirely false. The week-long Training Camp class contained lectures with anecdotal examples of real world use cases. Being in a class with other students was motivating and immersing myself in the material was essential for my study requirements.

-Quantum Exams: I DO NOT recommend this tool. This service is relatively overpriced. They are not actually representative of the exam questions, and they're only "hard" because they are wordy and contain arcane vocabulary. The explanations came off unhelpfully snarky and often do not even cite a source, so I found myself researching answers on my own using other tools. The worst offense to the value was that questions began to repeat during my second practice exam. I suspect that when people say they start scoring higher in this service, it's simply because they are beginning to remember the questions. I never scored higher than 350 or 400 on merit, yet I passed the actual exam at the minimum possible questions. (Note: QE tends to be reviewed favorably on Reddit. A subreddit [not this one] has a moderator with a conflict of interest that may remove discussions critical of the QE product. Consider this when reading reviews.)

-LearnZapp: I recommend this tool. It's relatively cheap and can be purchased on a monthly basis. The application interface makes it easy to log in and start drilling some questions while you're waiting for the subway, taking a poop (lol), or tempted to scroll through social media. These are also not representative of practice questions, but since they aren't pretending to be, you can quickly run through multiple topics and have an understanding of what you need to study. I consistently scored between 70 and 80% on these tests, but what really mattered to me were the high-quality, detailed, and objective explanations from trusted source materials.

-Destination CISSP: I highly recommend this book, by the Destination Certification folks. It's cheap and easy to pick up and read. A complaint I do have is that the book has inconsistent tone, occasionally poor grammar, and sometimes can ramble. These flaws are outweighed by the raw quality and accessibility of the actual content. I read my copy cover-to-cover once.

-Pete Zerger on YouTube: I highly recommend Pete's "CISSP Exam Cram 2026" playlist. This is the closest thing to the in-person class that you will find, and it's an appropriate substitute for it. This resource misses out on some of the practical anecdotes that I mentioned from the in-person class, but for the cost ($0) and the time commitment, it's absolutely stellar.

-Andrew Ramdayal on YouTube: My highest recommendation is for Andrew's "50 CISSP Practice Questions. Master the CISSP Mindset" video. It did the best job explaining the "Think Like a Manager" mindset that I heard so much about during these past few months.

My exam:

As the title states, I had answered 100 questions and had 70 minutes left on the clock when my exam stopped. I thought I was failing the entire time. I was only actually confident about maybe 5 or 6 answers that I had selected, and when the test stopped I was certain that meant I had bombed it. The exam does an excellent job at simulating a real world situation where you are sitting in a meeting room and given incomplete or inaccurate data and asked to make the right decision on the spot. The overwhelming majority of the questions WERE NOT technical and DID NOT rely on memorization. Understand the concepts and their applications well, and maintain that "manager mindset" that everyone talks about. I think the important takeaway here is to not give up on the test, even if you think you are doing poorly. It's designed that way and it's intentional. Commit to reading the question in front of you, stick with your first selection, and move on.

In closing:

I again want to thank this community for all of the posts like these. This type of crowdsourced information is truly the best of Reddit.

Hi all.

I have registered for the exam, and during filling the form, I saw "phone code" and "phone number" fields. I wrote the code in the 1st textbox, and the number without the code in 2nd textbox, and registered. After that, my number was modified to a without-code version in my isc2 profile. May I encounter any issues during exam? As it is said that phone is for 2 factor authentication.

To whom it may concern, I notice that "NIST SP 800-53 Rev 4" is still used in this course, seeing that it has been superseded by "SP 800-53 Rev. 5. on September 23, 2021

Hi everyone,

I'm currently preparing for the ISC2 Certified in Cybersecurity (CC) exam and I've seen several posts and articles mentioning Mike Chapple's CC practice exams as a great study resource. I've already been using other practice tests, but I'd like to try Mike Chapple's materials as well.

Could anyone provide a link to his ISC2 CC practice exams or point me in the right direction? If you've used them before, I'd also appreciate hearing whether they were similar to the actual exam and how helpful they were in your preparation.

Thanks in advance!