The Final 10–15 Days
By this stage, preparation was no longer about learning. It was about sharpening what was already there and arriving at the exam room in the right state.
I started by going back to CISSP Last Mile with a specific focus — the sections I had already highlighted as weak areas or dense topics that had not fully settled. Domain 4 needed extra attention, along with one or two topics in Domain 3. I started there. I did not re-read everything. I went straight to what I had flagged.
Every day I revised at least two domains — but only the highlighted portions from Last Mile or my own handwritten notes. Targeted and deliberate, not exhaustive.
My actual exam was scheduled at 10AM, so every day during those final ten days I sat down at exactly 10AM and took a practice test. I wanted my brain calibrated to its sharpest at that specific time. I took two tests per day, mixing platforms. I always respected the time limit, no exceptions. Over those ten days I completed more than 20 full practice tests.
The Three Categories of Wrong Answers
Analysing wrong answers was where the real learning happened in the final stretch. Every wrong answer fell into one of three categories, and each required a different response.
The first was a simple memory gap — I knew the concept existed but could not recall it under pressure. The fix was straightforward: go back, read it, reinforce it.
The second was confusion between two similar concepts — phishing versus something else, preventive versus detective. In these cases I went back to the precise definition of each option. This kind of confusion means the concept has been understood broadly but not with enough precision to distinguish it from a close neighbour.
The third category was the hardest: questions where all four answers seemed plausible. In CISSP, this is not a flaw in the question. It is the design. One answer will be the most complete — it will capture what the other three were each trying to say, and say it better, at the right level of abstraction. Learning to identify that answer is a skill built through exposure and analysis.
Always Practice with 150 Questions
One thing that made a genuine difference: in all my practice tests except Quantum's adaptive mode, I always set the paper to 150 questions. This was deliberate preparation for mental endurance. At the end of 100 questions the decision-making fatigue, question-reading fatigue, and mental exhaustion are at their peak. If you have practised for that consistently, it is not a surprise when it happens in the real exam.
My pacing target was simple: 50 questions by 60 minutes, 100 questions by 120 minutes. That left a full hour for the final 50. Practising to that rhythm consistently meant that when I sat in the actual exam and received all 150 questions, the pacing was automatic.
Protecting the Brain
In the final two to three days I stepped back from heavy question practice deliberately. Decision fatigue is real. CISSP demands sustained, high-quality judgment for up to three hours. If you overload your brain in the final days, you walk into the exam already depleted.
I also stopped consuming new content entirely. No new videos. No new strategies. I had already decided on my approach — how I would read a question, what I would look for, how I would think through options. Introducing new approaches at the last minute creates doubt, not confidence.
The Day Before
My exam was in Brussels. Luxembourg does not currently have a Pearson VUE test centre, so I had to travel. The day before the exam was simply travel. I visited the test centre location the evening before so there were no logistical surprises on exam morning — I knew exactly where it was and how long it would take to get there.
What Actually Happened in the Exam
The first few questions felt straightforward. Then others came where I genuinely had no certainty about whether my selected answer was correct. I went with what seemed best and moved on.
Somewhere around question 110, something shifted. I was losing focus, losing patience, and — honestly — losing belief. The thought that I had failed started coming through clearly. The pessimistic thinking was real and persistent.
I made a decision to keep facing the questions rather than surrendering to it. Some questions towards the end felt surprisingly easy, which brought its own kind of anxiety. I did not know what it meant. I still do not know for certain what it meant.
You will not know how you are doing while the exam is in progress. There is no signal. The doubt, the self-questioning, the moment where you are convinced you have failed — that is part of the experience for almost everyone who sits this exam. It does not mean you have failed.
One thing that genuinely helped in those moments was remembering that CISSP allows two attempts. Knowing I had another chance if needed did not make me careless — it made me calmer. It reduced the pressure just enough to keep thinking clearly.
I walked out uncertain. I looked at the result. I had passed.
5 Things to Remember
- Understanding beats memorisation, always. CISSP will not reward you for remembering definitions. It rewards you for understanding why things exist and when to apply them.
- Lifecycles are the backbone of the exam. Incident response, forensics, data lifecycle, SDLC — know where you are in each one at any given moment in a scenario.
- Think like the person who is responsible. Every scenario question is asking what a senior security professional would do — someone accountable for people, assets, and outcomes.
- Practice the way you will perform. Always practice at 150 questions under timed conditions. Calibrate your session to your actual exam time. Protect your brain in the final days.
- The exam is uncertain by design. Stay in it. You will not know how you are doing while it is happening. Commit to finishing every question with the same quality of thinking you brought to the first one.
Good luck. You are more prepared than you think.
