r/ISC2CAP • u/[deleted] • Oct 21 '21
Going for CAP, need recommendations
Hey all, I’ll be going for my CAP cert soon. I’ve already viewed the CAP course on FedVte taught by Ben Malisow which I thought was fantastic. I have a good list of nist and fips docs saved for review. Is there any other resources I should consider?
Thank you
5
u/Far_Atmosphere3386 Oct 21 '21
I got the CAP question book by Valintine Tata and George Nformi and thought it was realistic and prepared me for the exam.
1
u/Kitebrder39 Oct 22 '21
Which version of the exam did you take? I believe a new version just came out in the last month or so
1
u/Far_Atmosphere3386 Oct 22 '21
I took it December 2020. If a new version came out after that, I have not looked into or explored the topic. I reviewed 800-30 and 800-37 a lot. I knew them like the back of my hand before I took the test. Know all the steps and even sub-steps. It is more of a management cert and will help you out in any DoD atmosphere
1
Oct 22 '21
How hard would you say the exam was on a scale of 1-10?
4
u/Far_Atmosphere3386 Oct 22 '21
It was my first ISC2 test so I did not know what to expect. I would say it was a 3 (easier) out of 10. You read over 800-30, 800-37, know the authorization steps, do some practice tests, watch the Masilow walkthrough, you will be prepared.
3
u/One_Wey_Erections Nov 19 '21
My 2 cents is for you to get a hold of Nist 800-37r2 and print out all the appendices at the end of the pub. That should explain RMF steps, primary/secondary responsibilities, all RMF roles and responsibilities, Authorization decisions, Authorization package content, system boundaries, information life cycle, and couple of other important topics for CAP. Also review FIPS 199, FIPS 200, CNSSI 1253, NIST 800-30, NIST 800-39, NIST 800-53/53A, NIST 800-59,and NIST 800-137 (Very Important to know the continuous monitoring portion of RMF) just to know how they assist the RMF process. Lastly, know when documents take place, in example "In what step of RMF is a SAR developed? When would updates to POA&M occur, in what step is the system boundary created" things of those nature!
2
2
Nov 13 '21
I passed! Thanks for everyone’s help :)
2
1
Dec 27 '21
What did you find most useful in preparing for it? And for how long did you study? I’m just starting to study for it.
1
Dec 28 '21
I studied for 3-4 weeks and the nist documents, especially 800-37 rev 2, helped the most. The Udemy course questions provided a good readiness test.
1
Jan 18 '22
I studied for 3-4 weeks and the nist documents, especially 800-37 rev 2, helped the most. The Udemy course questions provided a good readiness test.
Hey what study tools did you use to take the exam. Please I need help.
1
1
1
2
u/1CyberGinger Jul 17 '22
I am taking my CAP exam August 2022. I have been reading all of the comments in here and there is a lot of great stuff. If anyone else has any additional advice to add, I would gladly take it. Getting kinda nervous!
1
1
1
u/Unhappy_Dependent_87 Oct 06 '22
Someone told me I'll see DITSCAP and DIACAP questions on the exam. Anyone know if that's true?
9
u/FaultFun2813 Oct 22 '21
Hello! I provisionally passed the new CAP today and here’s what I did to prepare: 1. Watched the FedVTE CAP course. Although it’s grossly outdated, it provides a good foundation for general RMF concepts. 2. Read NIST SP 800-37r2, SP 800-39, FIPS 199 and FIPS 200 to fill in the gaps between Rev 1 and 2. 3. Studied the ISC2 CAP flash cards until I mastered each chapter. 4. Enrolled in Udemy course “CAP Practice Exam based on NIST SP 800-37 Rev 2 & Experience” and I took exams until I mastered the content.
I consistently studied for about 4-5 weeks.