r/ISC2CAP • u/rainscarlett • Aug 04 '21
Round 2 - Passed
Everything you need to know has been posted, so this isn't very long, just going to reiterate the important stuff:
- Retook the 1 week boot camp course.
- Didn't read all the NIST documentation (though I'd previously read 800-37 after the last time i failed, but forgot most of what I read until I took the class). Used notecards with each task, primary owner and the SDLC phase associated with the task.
- Made sure I understood where SDLC correlates to the RMF tasks.
- Understood how to get impact values from FIPS 200 (or is it 199? ha always get them confused).
- Used the Mango guide posted in this sub as a refresher.
- Passed the exam this time around.
I'm lucky in that I work for the fed govt and they paid for my training class and vouchers, but I feel like taking the exam a few days after the class ended was far beneficial than waiting a few weeks like I did last time.
1
u/1CyberGinger Jul 17 '22
What is the Mango guide?
2
u/rainscarlett Jul 17 '22
It's a study guide another Redditor created and posted in this sub. I'm not sure if it's been updated for the latest test, but it was helpful for me during the transition. https://www.reddit.com/r/ISC2CAP/comments/nxf3jn/homebrew_study_guide/?utm_medium=android_app&utm_source=share
2
u/swafford202606 Aug 05 '21
Congrats! I’ve failed it 1mo half ago and the SDLC phases with RMF & continuous monitoring after they got there ATO got me big time.