I Passed the Certified Cloud Security Professional exam on Tuesday
Key Learning Point: "Ensure whatever you deploy into the cloud is more secure than whatever you deploy in-house"
For anyone interested in doing this exam I recommend the following.
Do CISSP first (I was able to answer a lot of questions because of the research I did for CISSP)
Read the CCSP CBK book - ISBN 978-1-119-27672-2 (Twice)
Read the CSA - Security Guidance for critical Areas of focus in cloud computing v3.0 (Free Download)
Read the CSA - The Treacherous 12 (Free Download)
Read the CSA - Cloud Control Matrix (Including the New GDPR section) (Free Download)
Read the Jerico - Cloud Cube Model
Read - OWASP top 10
Ensure you understand encryption
Ensure you understand virtualization technologies
Ensure you understand the core difference between IAAS, PAAS, SAAS
Read all Of the above
Free Flash Cards from ISC2 (Downloadable to iPhone and I think android)
CCCure Exam Prep - Accessible from your desktop https://www.cccure.education/ (Paid about £50-60) Helps get into the frame of mind and question format. Not many questions found on actual exam, but still worth it.
Studied for six weeks (But CISSP helps a lot)
125 questions in 240 Mins - Did mine in about 120 mins (70% Pass required)
Multiple Guess - straight questions but a lot of scenario based questions
More of a management approach than technical exam.
Yes I found it hard. Very broad questions (Alot of my knowledge came from doing CISSP)
All the materials are indeed useful, I had the pleasure to also be sent to a course led by Kevin Jackson which helped as well.
I took the exam around June/July 2016, and at the time I found the exam used some terms that were not discussed in the CCSP CBK.
I'd also note that CCSK v4 which is out is also a little more aligned now to CCSP than it was before.
All the best to test takers.
I would agree entirely completed my Exam in Oct 2017, the content is based on and was created in collaboration with the Cloud Security Alliance, so a good understating of their approach goes a long way.
Congratulations. Great reading list. I passed CCSP about a year ago and have read your CSA references as background refresher. Completely agree that CISSP first is essential.
Congratulations Simon and thanks for the information as it is the next thing on my list and I shall be using your list as a starting point - I am presuming that there is no app for your mobile as I found when I did my CISSP prep doing practice questions was invaluable.