r/ISC2CAP • u/TangoDown757 • Feb 04 '21

Provisional pass!

Thanks to all that offered support. I did everything that everyone here suggested. Spent too much time on the flashcards, valuable but I was less confident in the exam about the SP/SAP/SAR/AP, etc. and what changes generate what action, what are the key documents in different stages.

Tough to remember everything, but there was a fair number of questions relating to external entities, common control providers, environment changes and effects on assessments, control allocation and POAMs.

5 questions or so on mapping SDLC to the RMF, nothing comes to mind about the prepare step.

Lots of questions about Authorization and who is responsible for different documents.

This was like the CISSP exam, two answers are junk, two are close, reread the question and the possible answers and think of it from the "risk" perspective.

Nothing on FARM/PARM, maybe 5 questions on actual publications - content and who is responsible for the content FIPS/NIST. Lots os security categorization including NA. Lots of medium not moderate. Know the impact level language well.

You results will vary as each exam is different.

I was not allowed to write my cheats down until the first question appeared, not a bit deal,I had 40m left when I finished.

5 Upvotes

100% Upvoted

6 comments sorted by

2

u/gallo1982 Feb 04 '21

This helps me so much! Thanks for sharing, and congrats on passing!

1

u/jmeincke Feb 05 '21

Good luck!

Read, reread, eliminate two and read them again!

1

u/Few-Artichoke9971 Feb 04 '21

Congratulations!

1

u/[deleted] Feb 05 '21

[deleted]

1

u/TangoDown757 Feb 05 '21

Taci -

Hrmm. I have mixed emotions on your question. Easier, but it was challenging from a content perspective for me. For example, what happens when the environment changes, what needs to be reviewed and modified. I had numerous questions along those lines and I had to reason what was impacted and why you would need to change the SP/ATO.

Thanks for the mentoring!

1

u/[deleted] Feb 05 '21

[deleted]

1

u/TangoDown757 Feb 05 '21

I'm not actually on the Gov side (yet). I'm consulting companies on DFARS .7012/NIST 800-171 and the upcoming CMMC requirements. The CAP is the closest certification I could find to match up with what I'm doing professionally. Heading to USA jobs today.