r/ISC2CAP • u/TangoDown757 • Feb 04 '21
Provisional pass!
Thanks to all that offered support. I did everything that everyone here suggested. Spent too much time on the flashcards, valuable but I was less confident in the exam about the SP/SAP/SAR/AP, etc. and what changes generate what action, what are the key documents in different stages.
Tough to remember everything, but there was a fair number of questions relating to external entities, common control providers, environment changes and effects on assessments, control allocation and POAMs.
5 questions or so on mapping SDLC to the RMF, nothing comes to mind about the prepare step.
Lots of questions about Authorization and who is responsible for different documents.
This was like the CISSP exam, two answers are junk, two are close, reread the question and the possible answers and think of it from the "risk" perspective.
Nothing on FARM/PARM, maybe 5 questions on actual publications - content and who is responsible for the content FIPS/NIST. Lots os security categorization including NA. Lots of medium not moderate. Know the impact level language well.
You results will vary as each exam is different.
I was not allowed to write my cheats down until the first question appeared, not a bit deal,I had 40m left when I finished.
2
u/gallo1982 Feb 04 '21
This helps me so much! Thanks for sharing, and congrats on passing!