topic Re: CCSP Exam in CCSP Study Group

CCSP Exam

Dmor_11 — Mon, 01 Aug 2022 19:39:36 GMT

Hi All,

After about 1.5 years off from taking and failing this exam twice, I sat for it again last Friday. In preparation, work paid for a 5 day boot camp with a 93% success rate! I went through that and also bought the new CCSP CBK 3rd edition to supplement my learning. I also did a number of official CCSP practice quizzes and was in the mid-to high 80% range. During the test I felt really good. I didn't think there were many surprises, and even the 25 sample questions didn't seem to jump out at me. Upon completion, I was again disappointed to learn I didn't pass. I was above in two domains and below in four. Actually, I did worse than in my previous attempts. Clearly, I am missing something. I am going to try and perform a gap-analysis on each domain. I figure I will take additional remaining CCSP Official practice exam questions (30 questions each), focus on each domain, and see if they match up with my results. As a current CISSP and CISM holder, this is frustrating me. I don't need this exam, but would like to obtain and hold it. Now it's more of a challenge for me. Although, the definition of insanity is really making sense now.

Re: CCSP Exam

Steve-Wilme — Tue, 02 Aug 2022 10:18:51 GMT

Why not try the CCSK, as it may help you get your confidence back?

Re: CCSP Exam

Radioteacher — Wed, 03 Aug 2022 18:37:20 GMT

For the CCSP Exam I felt that this was helpful in my ability to pass.

Review "NIST Special Publication 800-146 Chapter 4", using this chapter as a foundation, I created alternate scenario questions in my head and answered them.

What change to part of the scenario would make me come up with a different answer? Like a "What if i changed this, would it change that?"

Paul

Re: CCSP Exam

hselmak — Fri, 12 Aug 2022 14:45:36 GMT

Hello Dmor_11 ,

(Edited)

Wow! Thanks for sharing your story first of all. It’s an eye opener for other CISSPs.

Following are some study resources/tips, maybe you find them helpful:

1. NIST SP 500-292 (Cloud computing reference architecture)

2. ISC2 CBK Reference, and the Official Study Guide

3. Lots of practice tests

4. Time to review

I wish you all the best and hopefully you make it through this time.

Best wishes!

Re: CCSP Exam

bpdelacruz — Fri, 05 Aug 2022 18:28:45 GMT

Did your employer also pay for your exam, not just the bootcamp?

Re: CCSP Exam

Dmor_11 — Thu, 11 Aug 2022 13:56:31 GMT

Yes, employer paid for the bootcamp, which included 2 attempts. The first 2 attempts were out of my pocket.

Re: CCSP Exam

Dmor_11 — Thu, 11 Aug 2022 13:57:31 GMT

Thanks! Good luck to you. I'm trying to shore up some loose ends and prepare for another attempt in a few months, 😁

Re: CCSP Exam

Dmor_11 — Thu, 11 Aug 2022 13:58:20 GMT

Thanks! I will check it out.

Re: CCSP Exam

Dmor_11 — Thu, 11 Aug 2022 13:58:45 GMT

I might give this a shot.

Re: CCSP Exam

JoePete — Thu, 11 Aug 2022 16:26:43 GMT

@hselmak wrote:
Wow! Thanks for sharing your story first of all. It’s an eye opener for other CISSPs too! I attended a skillsoft CCSP bootcamp recently and the instructor mentioned that “CCSP is more of a tweaked CISSP, and that it’s made by CISSPs for CISSPs”, but your experience is a game changer to that notion.

My sense is the CCSP is kind of a certification lost on the seas of security without a home port. Cloud security varies so much depending on the type of service (and, in some cases, service provider) that the CCSP content may feel too broad. While I haven't looked at the most recent CBK, I agree the prior versions really seemed to be built upon the foundation of the CISSP plus some more business focused concepts. As an example, you need to understand risk management well for cloud security due to the variation in pricing models across different service types. The CCSP CBK didn't really hit on that (again, I haven't looked at the most recent), but if you have that it may help you get the big picture that makes a lot of the CCSP content fall into place.

To me that is the big wrinkle that has come with the cloud is it really forces security folks to understand business drivers. Back in the on-premise days there weren't as many variables. Part and parcel with that is being able to communicate security to the business folks. To them, they think data and applications are just a box that you are moving from an on-premise closet to some "cloud." That move literally changes the security context of everything. I think that's the hard part of the CCSP. It's trying to certify a range of knowledge that typically is built up in steps (business, sense, security sense, and knowledge of particular providers).

Re: CCSP Exam

kpearlst — Thu, 08 Sep 2022 23:35:01 GMT

Hello Dmor,

Don't feel that bad....I too just failed on my first attempt and i did study...

I would like to take the exam again but i believe to really pass this exam you really have to be able to digest and to SYNTHESIZE the CCSP content.......which means this is the type of exam you can't just memorize the book and pass....you need to understand the concepts but more in what situations the concept that you are learning can be used....For example, there were questions about what best to put in an SLA...I often narrow it down to two answers but then for me it is often a toss up...and that is where i get tripped up....

There was a question and there was an answer with service level objective and Service Level Objective.....Perhaps that wasn't the right answer but i had no clue what the difference was...

So for me....i do know most of the definitions and much of the content...but i just don't know how best to snynthesize this knowledge to make sense when it comes to choosing the BEST answer......

Also i am not used to not being able to go back to a question and really mull it over....there were a number of choices i wish i had an opportunity to think about the answers but unfortunately ISC2 does not allow that....

So....if someone reading this post can offer advice on what study materials will really help in understanding the relationships between the concepts and what the questions are really asking.....that would certainly help me!!!

Re: CCSP Exam

JDake801 — Wed, 28 Sep 2022 22:58:01 GMT

This may be a lame idea, but sometimes its not so much that you don't know the info, but how you are thinking or understanding the question. I say find someone who has passed the exam, sit with them and read the practice questions. On any questions you get a different answer, have them explain to you "the why" they chose the answer and their perspective on how they understood the question.... ? I had to take this approach on my CCIE many years ago. Hang in there, and DON'T GIVE UP!

Re: CCSP Exam

Gamars — Thu, 29 Sep 2022 23:33:37 GMT

My study resources for my CCSP are the official study guide, the official practice test and the. CCSP CBK. Read thru the official study guide and do the practice question at the end of each chapter. It’s fine to get the answer wrong, that’s where you learn. Read thru the questions again and review the chapter again. This time find out why the option are wrong and why it’s correct. Do the same to all the questions that you didn’t get it right. Remember, doing that too fast is not the recommended. Do make use of the study guide and cbk as the resource to get the right answer. Once you are completed, do the official practice test to see if you are ready for the exam. For my case, I set the expectation to get at least 87 to consider that I understand that domain. When doing those questions, always have the habit of reading the questions carefully and having the understanding why each choice is correct or wrong. Hope this helps and good luck. Don’t give up.

Re: CCSP Exam

Gamars — Thu, 29 Sep 2022 23:36:46 GMT

That’s so true, may need to change the thinking for some security practice as you cannot do the same in a cloud environment. Good tip.

Re: CCSP Exam

jitu786 — Wed, 12 Oct 2022 14:24:50 GMT

Hi,

Currently i am holding PMP and CISSP. no cloud experience. do you recommend I should go for CCSP.

Thanks for your advice in advance.

Regards,

Re: CCSP Exam

abhattac5 — Thu, 03 Aug 2023 01:14:16 GMT

Hi @jitu786 - in my opinion, it depends on your situation. But generally speaking, I think you should go ahead and obtain a CCSP, as it would differentiate you from your peers and colleagues.

Especially if you are looking to enter into a cloud-focused role or further prove your ability to analyze cloud security in addition to your CISSP, this certification would be helpful to have. Beyond that, it's vendor agnostic, so can be applied to any cloud environment.

With a few resources and a good study plan, the cost and time commitment is reasonable. It took me maybe 2 months to study/pass it, and I used official resources only (books, test banks). If you need a study plan, here is what I did to pass:

https://community.isc2.org/t5/CCSP-Study-Group/Passing-the-CCSP-My-Experience-Jun-2023/td-p/60404

Hope that helps!

Re: CCSP Exam

Steve-Wilme — Fri, 04 Aug 2023 07:21:26 GMT

As an alternative you could take the CSA CCSK exam first, which will familiarise you with the Cloud concepts and you can take online from home/work. It's a 90 minute exam of 60 questions @ $395 for two attempts. It's an open book exam, but don't let that deceive you, as you'll have to have read and learnt the materials before you sit the exam. The downloadable PDFs are probably the best to study from, but you can also use the CCSK all in one book, which is okay.

Re: CCSP Exam

geno3541 — Tue, 08 Aug 2023 15:18:58 GMT

I failed the exam this past Saturday (Passed 4 Domains/Above Proficiency/Failed 2 - Below Proficiency) and it came to my attention during the exam the 3rd Edition resources would not facilitate the necessary information to pass this exam. So, today I ordered the CCSP CBK 4th Edition & CCSP '1000 Questions' practice test/exam guide. Rescheduling 30days from now as per regulations. Would you suggest any other resources as I know your attempting the exam again. Thank you.