Generally, those who make the ISC2 exams are completely separated from those who develop training materials for it. A large part of that is ensuring the integrity of the exams. I assume the CC follows this model, which applies to the established exams of the ISC2.
Sorry to hear that you were not successful.
@JoePete is correct. ISC2 must keep the exam and trainings separated but they do follow the same outlines, Also note, that ISC2 us NOT allowed to teach the exam. Both teams will use the outlines to develop either the exam or the training. Remember the outline (commonly called the Common Body of Knowledge (CBK)) is intended for folks to be able to understand the subjects that will be taught/tested in each domain. So it logically follows that the questions might be on different subjects in any Domain.
d
@Adrianlockhart, anyone who's been around long enough has failed an exam and it doesn't feel good. Sorry to hear you weren't successful.
I took the CC a few years back as a beta tester. I had CASP and CEH already, so it was more "fun" for me to take it. I remember the CC being no more difficult than Sec+. I thought the CC had more robust (and better overall) questions than Sec+ and I remember thinking the training was pretty fair for entry-level cybersecurity.
What alarms me is that you said you have 20 years experience in IT and were scoring well with the material and still didn't pass. To be honest, that's hard for me to understand. Even if the training materials we're off, after 20 years in IT it seems like an entry-level cert shouldn't have been an issue.
What do you think the issue was? Highly-specific questions? Proprietary ISC2 questions? Did you research the topics on your own or rely only on the training material?
An honest lessons-learned session can be very beneficial for the re-take effort.
Again, sorry to hear about the attempt. I've been there.