Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm looking to sit for my exam in a few weeks, and I want to have a good set of practice tests to bounce against and make sure that I'm up to par with the types of questions that will be asked.

share|improve this question
I don't know what your situation is, but if you have access to a university (or other?) library, there are sometimes unexpected electronic resources available. I work at a university, and discovered that through a subscription to Safari Books Online/O'Reilly, there are several CISSP titles available, including question-oriented offererings. – jgbelacqua Feb 1 '11 at 20:12
Sharon Harris' book was a prescription sleeping aid for me. I enjoyed the Sybex book as well as the Syngress book. Both great reads. – user45269 Apr 23 '14 at 15:06
If you haven’t seen the Skillset exam prep engine, it is worth checking out - Thousands of CISSP exam questions and totally free. – user55237 Sep 9 '14 at 21:04

10 Answers 10

up vote 22 down vote accepted

You could check out - it was always the one I recommended folks go to when I used to teach CISSP. I have just checked it out and it has even more material than it did 5 years ago. It requires free registration, but then you have access to documentation and practice tests.

(and good luck!)

share|improve this answer
I second this. I was given other question dumps but had the best ones. You can select the domain's you want to practice on specifically which I believe is the best bet for focused learning. – James Santiago Jan 25 '11 at 14:45
+1, I went to check my old bookmarks, and it turns out the best ones were also cccure... – AviD Jan 25 '11 at 22:28
If you sign up at cccure get ready to add an entry to your spam filter. Still a great resource though. – RobotHumans Feb 10 '11 at 15:58
The web site is not updated. changes in 2012 application changes to software. – user10602 Jun 13 '12 at 15:21
+1 CCCure is a great resource and well worth the registration fee. – adric Aug 27 '13 at 18:04

Though not practice exams, I found the mind maps offered @ to be a great set of notes to use in keeping things together. They have published maps of 7 domain areas for the CISSP and a few for the CEH. Additionally, you can always make your own.

Hope this helps, and good luck to you!

share|improve this answer

cccure is a great resource. I also paid for study questions when i was studying and the cccure were harder, and more accurate to the test. Actually a lot of the cccure questions were harder than the actual test questions.

Testing youself against a test bank is a good practice but I didn't really find it super helpful. It is a good activity if you are tired of reading or memorizing. Honestly the best study help that I found was to create a bank of terms that I didn't know, understand, or couldn't remember and then create flashcards for them. Going through the flashcards was helpful, but it seemed like the act of writing down the answers during creation was almost the most helpful part.

I know everyone learns differently and this is a bit of a departure from the op's question, but hopefully this is helpful.

share|improve this answer
Since the test is so, so broad I did find the definition approach to be the most helpful. If you know all of the terms and loosely how they relate to each other and what each terms main security implications are, that is pretty much as good as you can do. The test questions are a good measure of how well you have done this. – freb Jan 25 '11 at 19:39
Since ISC^2 attempt to provide high confidentialiaty for the test questions, they expects practice exams to relate only to the material and not specifically to the actual test questions. This is different then say SAT prep questions which are ment to be representative of the exam. Those who take the CISSP exam sign a non-disclosure agrement regarding the test questions. You might actually be better off attempting to write your own questions then to try someone elses. – this.josh Jun 9 '11 at 2:08

For CISSP, I highly suggests Shon Harris's book.

It's the single best book to cover CISSP I've read.

share|improve this answer
Which one in particular? – JMK Jan 10 '13 at 11:22
The All-in-one version. – Alex Jan 10 '13 at 18:56

I found this to be good as well. CISSP Free 50 question Practice Test

share|improve this answer

The Shon Harris All in One book, as pointed out by Alex, is quite good. In my opinion, however, you can't just rely on one book. You may also want to look into the offical (ISC)2 study guide, from their web site. I would also supplement any 'study guide' with reading published specs (NIST 800 series and the 17799/27001 series IEEE/IEC at the very least). I would also HIGHLY recommend that you get some real exam simulation experience under your belt. The All in one book comes with some good simulator sets but there are also good ones on the net. The cccure sims were a good tool for me as well.

All the best in your studies,

-grauwulf CISSP, CEH, CHFI, GPEN

share|improve this answer

There are a few other useful exam resources:

I know about a few more, but the links appear to be dead. I'll check and comment again.

share|improve this answer

Adding to this list would be the list of relevant articles at 100Questions Exam Portal (, which has a good set of reference articles on CISSP domains, CISSP Tips on security architecture and design, physical and environment security, cryptography and many more. The only thing is that it is not a pure CISSP site but also contains other exams, but it's neat interface makes it easy to find the CISSP resources.

The other good thing is that you can test your CISSP knowledge and prepare for the exam via the exam library, which contains free-to-try exam questions. The CISSP section could be accessed from the drop-down menu, and because the portal covers several topics, it could be confusing initially due to the enormous amount of data, but if you spend some time navigating the contents you might be well-rewarded!

And if you want another exam portal with game-like exam resources, you might want to try Exam Fight at

I should try to compile a list of useful resources which would be easier to refer.

share|improve this answer

Shon Harris is the best book to prepare for CISSP. Other than that, I think you must take expert training as it helps a lot in understanding the concepts better thus, clearing the examination. You can check Simplilearn for that. They have great course content. They have free CISSP practice test too. I think for that one need to sign up on their website. I hope this helps! Good Luck!

share|improve this answer

Not free, but cheap: Find the CISSP Dummies book, take the disk out, and throw away the book. You might be able to find it at a used book store or used on Amazon.

The disk has hundreds of questions. I thought I was well prepared, then I tried the dummies questions. This proved I had lots of holes in my knowledge and motivated me to study much harder.

share|improve this answer

protected by Community Sep 10 '14 at 8:35

Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.