Passed my CSSLP exam today (Just sharing)

[bentan74]

Would like to share my approach for the exam, passed today on my first attempt.

1. I attend the ISC2 class and read the student guide v5 and also read the 2013 official ISC2 CSSLP CBK. Read both books twice within 2 weeks and attempts all their questions to resolidify my understanding.

2. Also read OWASP Top 10, SAFECode material to under them more.

3. During the exam, think as a security manager/PM since their questions are more testing your experience and knowledge in SDLC, security concepts and project management.

Hope it helps, good luck to all.

Study hard and earn it, you will feel a sense of satisfaction.

Ben

[Early_Adopter]

Sorry to hear that - did the system provide feedback on which domains you needed to work on? I used a part time online review seminar with ISC2, 'Threat Modeling' and the CBK and didn't have any issues, but I'd worked as a PM for about five years at that point and handled a lot of bug fixes across multiple products with supply chains in multiple countries.

These might be helpful:

https://www.isc2.org/Certifications/csslp/Certification-Exam-Outline

https://www.isc2.org/-/media/ISC2/Certifications/Exam-Outlines/CSSLP-Exam-Outline-Sept2020.ashx?la=e...

https://www.isc2.org/certifications/References - I would focus on NIST and OWASP here first.

[swh5a01]

I would say, draw a map for your understandings for the exam outline. Linking all the nouns in the exam outline and explain to others. This method helped me to passed CSSLP and CCSP

[Rohit_CSSLP]

Thank you so much for your response. Could you please share your experience as to what study material and practice tests you referred for the exam preparation.

I attended Bootcamp training from a vendor called Training camp and studied thoroughly the ISC2 official study material (edition 5), but still failed.

[Rohit_CSSLP]

Thank you so much for your post. Could you please share your experience as to what study material and practice tests you referred for the exam preparation.

I attended a Bootcamp training from a vendor called Training camp and studied thoroughly the ISC2 official study material (edition 5), but still failed.

[swh5a01]

I only used exam outline and CBK. CBK only the dictionary to me and exam outline helps a lot. And, of course, the experience of putting all things together would help. Thinking strategy should be you are going from DevOps to DevSecOps, what should we do and why? This question is the huge help

[Early_Adopter]

DevOps is just a series of pipelines...

[Kyaw_Myo_Oo]

Hi Ben,

Congratulations. Thanks for sharing.

Kyaw Myo Oo(Mr.)
CCIE 58769 | PCNSE | CCSE | CISSP | PMP

[swh5a01]

Yep, but in DevSecOps, what kind of test you should do and why is the more important. The reasons behind the test should be related to mitigates some of the risk in the whole picture. So, that's how the exam benefits me and helping me to leading the DevSecOps project in my company.

[Early_Adopter]

Yes. Sorry, I was just riffing on "The internet is a series of tubes..." rather than necessarily saying anything about the process or security.

CSSLP I think is probably to me the most useful ISC2 certifications I hold simply because, it's CBK has quite a narrow focus but binds together a lot of disparate areas, and it helps you to quickly articulate what is going wrong and how best to fix it.

[Rohit_CSSLP]

Could you please recommend a trusted site for the sample exam practice question?