How to pass the CCSP exam

I just passed the Certified Cloud Security Practitioner (CCSP) exam. It wasn’t easy, but nothing you can’t prepare for.

Apart from the official (ISC)2 guides, here are some of the resources I used in my studies:

• Cloud Security Alliance Security Guidance v4.0
• Cloud Security Alliance Enterprise Architecture
• Security Guidance for Critical Areas of Mobile Computing
• CSA Cloud Controls Matrix
• The ‘Treacherous Twelve’ Cloud Computing Top Threats in 2016
• ENISA Cloud Security Publications
• NIST SP 800-146 Cloud Computing Synopsis and Recommendations
• NIST Special Publication 500-299 Cloud Computing Security Reference Architecture (Draft)
• OWASP Top 10

If you would prefer to add video lectures to your study plan, there’s a free course on Cybrary. For a quick summary, check out these study notes and mindmaps. Also, multiple sets of free flashcards are available on Quizlet.

It is a good idea to do some practice questions: there are books and mobile apps out there to help you with this. Practical experience in cloud security is also essential.

The exam tests your knowledge of the following CCSP domains:

• Architectural Concepts and Design Requirements
• Cloud Data Security
• Cloud Platform and Infrastructure Security
• Cloud Application Security
• Operations
• Legal and Compliance

The structure and format might change as (ISC)2 continuously revise their exams, so please check the official website to make sure you are up-to-date with the latest developments.

On the day, read the questions carefully. It’s not a time pressured exam (I was done in two hours), so it’s worth re-reading the questions and answers again to make sure you are answering exactly what is being asked. Eliminate the wrong options first and then decide on the best out of the remaining ones.

Finally, my suggestion would be to approach the questions from the perspective of a consultant. What would you recommend in each situation? Don’t go too technical – keep the business needs in mind at all times.

Don’t stress too much about the final result. I’m sure you’ll pass, but even if not on your first attempt, you’ll learn either way! Remember, the knowledge you accumulate in the process of preparing for the test itself has the most value, not the credential.

Good luck!