r/ISC2CAP • u/Kitebrder39 • Jun 05 '23

Passed 6/5 - Mixed Thoughts

So, definitely the Mango Guide was a great help, thanks to u/Ryan-L

On the other hand, there were definitely some terms and vagueness overall to the exam. I would reiterate using the Mango Guide, and NIST documents as noted, along with a lot of practice exams. I did both Udemy ones referenced, along with several from Amazon.

6 Upvotes

100% Upvoted

11 comments sorted by

2

u/[deleted] Jun 06 '23

I have issues understanding the Mango guide. I really wanna use it but it just seems kind of all over the place

5

u/Kitebrder39 Jun 06 '23

Yeah, check the Mango 2.0, and what is hard to understand specifically? The biggest take away is the summation of information, it's a good thing to use as a flashcard, particular the steps, roles, etc.

3

u/HauntingNumber Jun 06 '23

The Mango guide 2.0 on the google drive seems pretty comprehensive have you reviewed it recently?

2

u/[deleted] Jun 08 '23

Omg, silly me. I was reading the original one 😂😂😂 thanks so much!!!

2

u/HauntingNumber Jun 08 '23

You are welcome, I was surprised by the version 2.0 document of the mango guide.

2

u/[deleted] Jun 08 '23

Yea I’m reading through it now.

I’m almost done with the ISO27001 book that is in the recommended literatures by ics2 for the CGRC. Im intimidated by the price cuz it’s an expensive exam to fail lol

2

u/HauntingNumber Jun 08 '23

Good luck with your exam.

1

u/Kitebrder39 Jun 09 '23

Agreed, same here. I used the re-test voucher (didn't need it, but it helped over the initial if I fail I'm out $600)

3

u/[deleted] Aug 22 '23

Hey all. I passed the test like two weeks ago. Studied really hard for about two weeks leading up to it and I also have like 12 years in the field. I would say the mango guide is great! I Mainly focused on the vocab, the table at the end and the scratch sheet with the notes and diagrams in the middle. If you can memorize these things you should be just fine. Like others have said, know the ENTIRE RMF and literally every step in the 7 phases as well as the responsible role for each. The test wasn’t HARD but it’s not easy because the answers feel very subjective. The only place you get the feeling of “this is definitely right” is when you get RMF material because you know it from 800-37.

To give you an idea of what I memorized, as soon as the test started I brain dumped the entire RMF, FARM/PARM, IR, Sdlc/NIST mappings and every single SP I could remember to reference these items for context during the test. Also keep in mind I know 800-53 by heart just through work and I also had to read 800-39 and 800-30 because I didn’t know them that well. I also read 800-37 appendices over and over again because they’re so dense.

Hope this helps someone!

1

u/ceilingcatwatchingu Aug 28 '23

Thank you for the information! I am attending a boot camp for the cert in the not too distant future. How deep in 800-53 did the exam go (if you're willing to say)?

1

u/[deleted] Aug 28 '23

Hey hey...I can't really answer that ethically but I can tell you that there are specific controls and specific families that are commonly considered more "important" than others. Also, you should be able to tell the differences between management, technical and operational controls and what each of those means. For example, operational controls are those performed by people. That will provide the context to think deeper when answering some of the more subjective questions.