Man it's been too long since I posted on this forum. I just want to thank everyone for the information they share here. It makes it a great resource before and during preparation for exams. I just passed the CCSK.
I used three resources: (1) CSA's Security Guidance for critical areas of focus in cloud computing V3.0, (2) the ENISA guide (read pages 1-70ish), and (3) I purchased the "Fast Track CCSK Certification: the Ultimate guide for cloud certificate" on Amazon.
(1) Is obviously the most important. I enjoyed the content in most sections. Some were very repetitive and a little exhausting...
(2) ENISA was a really helpful reference for understanding cloud security. The questions that start around page 70 are helpful for everyday work, but I didn't read them as a part of my study.
(3) DO NOT PURCHASE....it's only 10$ but I felt it was really poor material. Bad grammar, bad spelling, and it really didn't add much if anything to my study. Yes it's brief, but I wouldn't recommend it. I read the thing in a night but would have preferred buying more Dr Pepper and studying resource (1). I'd give it a 2-3 stars out of 5. Stick with resource (1) and know it well enough to know where certain material is.
I found that if I generally knew a section really well, I could navigate to the section where I thought an answer may be and then search their rather than searching through the whole document. I know this is obvious, but it was super helpful. You don't have time to look up everything.
The test wasn't overwhelmingly difficult and could be passed with 2-4 weeks of SOLID study. I went through the whole test in an hour and had about 30 minutes left over. I used the 30 minutes to review 15 questions I had marked for review. Some of them I was able to confirm and I only changed about 4. I finished with 15 minutes to spare. Missed 6, so 90%. I studied on and off for about 4 weeks. Wish I would have put my head down and knocked it out in 2.
I know I said it wasn't overwhelmingly difficult, but if this is your first introduction to cloud, it may be more challenging. I currently manage security and risk in a smaller Healthcare/Benefits organization and review cloud solutions regularly. One thing I would add for help, CSA added this portion to their website:
"CCSK Guidance V3Click each domain to view a question from the V3 examination"
Rufio
