I gave the CAP exam recently and was expecting NIST 800-37 r2, but my exam was NIST 800-37 r1. I was not expecting this, fortunately the (ISC)2 trainer did explain the changes and that could help me with the exam. And I am a certified CAP since October 2022.
I can guarantee the exam tests on the rev 2. I am the senior manager of content development for exams. The CAP has expanded to other risk frameworks as well such as ISO, COBIT etc.
All items have to have a valid reference and all references have to be the most updated. In fact at the beginning of each year, we post a reference list that includes the most widely used on the exams. https://www.isc2.org/Certifications/References