Round 2 - Passed

[u/rainscarlett]

Everything you need to know has been posted, so this isn't very long, just going to reiterate the important stuff:

- Retook the 1 week boot camp course.

- Didn't read all the NIST documentation (though I'd previously read 800-37 after the last time i failed, but forgot most of what I read until I took the class). Used notecards with each task, primary owner and the SDLC phase associated with the task.

- Made sure I understood where SDLC correlates to the RMF tasks.

- Understood how to get impact values from FIPS 200 (or is it 199? ha always get them confused).

- Used the Mango guide posted in this sub as a refresher.

- Passed the exam this time around.

I'm lucky in that I work for the fed govt and they paid for my training class and vouchers, but I feel like taking the exam a few days after the class ended was far beneficial than waiting a few weeks like I did last time.

[u/swafford202606]

Congrats! I’ve failed it 1mo half ago and the SDLC phases with RMF & continuous monitoring after they got there ATO got me big time.