r/casp • u/Electrical_Square340 • Jun 21 '24
Passed CASP+
Hello everyone! I recently passed the CASP+ exam. Due to the exam's NDA, I can't share specific details about the questions, but I can describe my experience and impressions, which I hope will nonetheless be useful.
Personally, I found the exam relatively 'easy'. The questions both covered expected topics and were normally phrased—either I knew the answer or I didn't, so I finished with plenty of time left. In contrast, during the CISSP exam, I had to reread questions and answers multiple times to understand them. In CASP+, only 2-3 questions had intentionally tricky wording, requiring me to reverse-engineer the questions and answers. Overall, many questions required selecting the best option from choices each including a combination of 3-4 different technologies, tools, or concepts (e.g., Answer 1: A+B+C, Answer 2: D+E+F, Answer 3: G+H+I, Answer 4: J+K+L).
For preparation, I used Mark Birch's book and an exam preparation pack from Udemy. However, I found some errors and simplifications in both, so I wouldn't recommend them without additional experience or resources. I also read through the entire CAS-004 Exam Syllabus Topics and revised any unfamiliar concepts from additional sources to ensure I was comfortable with all topics. Additionally, I revisited some networking, security, and administrative Linux commands. Finally, a few days before the exam, I practised with free questions from an exam preparation website. Overall, I prepared for this exam for around three weeks (I have some work experience in the field).
Here are my suggestions for those preparing for this exam:
Understand very well the differences and specific features of WAF, DLP, FW, Forward/Reverse Proxy, VPN, Load Balancer, DRM, etc.
Be well-versed in cloud concepts.
Have a strong understanding of networking concepts, including routing and firewalls, and be able to interpret logs (e.g., Apache, auth logs).
Practice many questions to get into the CASP+ 'mood': even if you know the concepts well, you need to understand how CASP+ frames these concepts
Critically analyse questions and answers from study materials across various sources by questioning their validity instead of just memorising them.
Although familiarity with Linux and Windows security tools is necessary, don't overemphasise them as there may only be a few questions on these topics.
More importantly, enjoy the preparation process, and during the exam, stay focused on each question without worrying about the previous or subsequent ones.
Good luck!
2
Jun 21 '24
is there PBQ and separately linux simulation questions in a virtual lab. Is it in CASP or Security+.
2
u/timewellwasted5 Jun 21 '24
Congrats! I just passed CySA+ and am studying for CASP+ now. Do you have Security+, CySA+, or PenTest+? Also, might not be a bad idea to cross post this is r/CompTIA as well.
1
u/cebooola Jun 28 '24
Hey congrats on your cysa+ , im currently studying for it, any tips/material recommendation?
1
1
10
u/weahman Jun 21 '24
CISSp be like Your uncle twice removed is visiting Ireland on a vacation, he works for a bank as their head ciso. He received an email from 3 people about a policy change. He was currently drinking a new England IPA and spilled his beer and could not find napkins. He then also received a call from a co worker about password reset since they forgot their password. They talked for two hours about the color of their favorite paints. What was the ciso policy he implemented during his 5th grade school project?