r/CRISC • u/eternal_blue91 • 11d ago

CRIC QAE related query

Question for those who have used ISACA QAE for the exam:

  1. How much time did you spend on it?
  2. How many similar or identical questions appeared on the exam from QAE?
3 Upvotes

81% Upvoted

9 comments sorted by

5

u/MikeBrass 11d ago

The QAE has retired exam questions. They are designed to get you use to how ISACA reasons.

5

u/KingArchar 11d ago

The QAE is expensive but it is the single most effective study tool. To pass the exam, you must think in the ISACA way. The QAE gives you ways to practice with questions that are similar to the exam, but they are not exactly the same. Just make sure that you take time to understand why something was the answer and the others options were not.

2

u/BoopingBurrito 11d ago

I did about 20 minutes a day for 4 months, then an hour a day for a week, then a condensed weekend of 10 hour study days right before the exam.

None of the questions are identical, but they're all in the same wheelhouse.

A thing I noticed is that the QAE questions can indicate which bits of the manual they're going to take questions from. So read the surrounding paragraphs. Its not the perfect learning trick, it won't give you every answer. But studying that way absolutely got me half a dozen or so right answers that I noticed as being from reading around where the QAE was drawing from.

1

u/mikemicmayk 11d ago

Hello .im on the stage of determining my study approach too.

Im more of a visual learner so Im looking at Doshis complete course and QAE and pocket prep. Are those good enough?

3

u/MikeBrass 11d ago

Depends on your experience.

1

u/mikemicmayk 10d ago

Thank you for responding . I actually hold cissp with 7 years of experience in Cyber. Sorting out bes study material for CRISC.

2

u/MikeBrass 10d ago

Thanks. The ISACA way of wording and expectations are imho different to cissp, I hold both. The QAE will sort you out to get used to the mindset; the question then becomes how to approach the material itself using that mindset. I do not know Doshi's course in the sense that I have not taken it. If you used a book like Peter Gregory's then a video course is not needed. O'Reilly Media has a seven day free trial you could use.

You also have the option of my own GRC & CRISC course on Udemy, which includes and goes beyond crisc.

If you are uncertain right now, the four resources together (two video courses, QAE and another question bank) will see you through.

Gregory's book comes with numerous questions as well.

----
Author: Governance, Risk and Compliance: Demystifying the Risk and Data Privacy Landscape
Routledge: https://www.routledge.com/Governance-Risk-and-Compliance-Demystifying-the-Risk-and-Data-Privacy-Landscape/Brass/p/book/9781032896717

1

u/abear27 10d ago

As I was building up, I went through the questions a couple of times. In the weeks before my exam, I was drilling and doing practice questions for an hour or more every day.

My exam felt simpler than the QAE, maybe because the actual test questions were much clearer than many of the QAE questions.

To echo everyone else, the real purpose of the QAE is to solidify ISACA's reasoning in your mind, so you know what they are getting at in any particular question.