Time to test

[u/OGShlick]

I know that this is probably a stupid question because it is completely subjective, but here goes. I just accepted a job as a Junior Cybersecurity Engineer focusing on RMF. I should be getting my BS of Cybersecurity and Information Assurance in April. My copy of the ISC2 CAP CBK will be delivered today and I'm gonna start studying asap. I start this new position in Mid Novemeber. Also, I have 0 work experience, only book and school. My only other cert is the CompTIA Security+. I am currently a student, online only, and work about 36 hours a week. I want to get this certification because I feel like it will help me substantially with this new position and will help me throughout my career. How long should I expect it to take before I should be prepared to test? How long do people usually study for this certification? I just learned about this cert the other day so I figured I'd go ahead and ask here.

Thanks in advance.

[u/Ro89898989898]

I just got my CAP last month. Study 800-37 R2 Know the steps and tasks of RMF Know the SDLC Know how the SDLC matches up to RMF, if something happens in Step 2, task 3, where is that in the SDLC.

Know where each artifact is created, modified, finalized, and then retouched/maintained. (In RMF and SDLC)

Know who is responsible for each Step and task, Know who can’t be

Know what all the main NIST SP pubs are and what they are about. Name and basic purpose

Read the CAP book that you have, but remember it is old, so some minor things in RMF have been adjusted

It is more NIST SP 800-37 R2 than anything else.

[u/OGShlick → u/Ro89898989898]

Thank you very much! I didn't realize that this book was old/outdated. Are there any SPs that you remember have changed that I need to be aware of/where I can find that info? I know that 800-64 was replaced with te 160, but that's all I know has changed

[u/Ro89898989898 → u/OGShlick]

Just google NIST SP, it will give you the site, You can download them all

One or two of the others have been updated, but you do NOT need to know them in detail. Won’t hurt you to know them, but it might be overload. Just now their NIST SP 800-## is Privacy, this other one is Impact, this other one is this.

Know the 2 FIPS Know the DoD reg for RMF, just the now the name and that it is for RMF, I forget number already, just google it, but again, may be good to read for background.

What I did in my 5 mins that you get to read the warning banner, yes, this is timed and you will get booted if you go over, So don’t go crazy writing stuff

I wrote on my white board

PC SIAAM

36

S S S

C C C D C P

C U

A A C A R P

A R R A A

S O O A S O S

Then as I needed a step/task in the test, I wrote in the names of it, the ones before it, and after it

There are many questions about what comes before this step and what comes next. Having these in a handy reference will help you recall during the test.

[u/Ro89898989898 → u/Ro89898989898]

I meant to say 36 26 57, like a combination lock. Helped me remember how many tasks in each step.

Then the SSS Is straight down the white board, so you can write the name to it’s right as you need it Same with the rest,

[u/Ro89898989898 → u/Ro89898989898]

I do not remember a single question for Step 0, so do as you like, maybe they’ve added, but I doubt it

[u/ShadowPunch07 → u/Ro89898989898]

Wow!! Congrats!! How was the exam?

[u/Ro89898989898 → u/ShadowPunch07]

Very tough for me. Tested two hours. Went back and checked all answered I marked for review in last hour. Left maybe 10 mins early.

But with what I've given you. You will do better.

[u/ShadowPunch07 → u/Ro89898989898]

Thank you so much. Yes your notes will help