Passed CCSK today.

Decent exam, definitely requires a lot of general cloud knowledge and some specific CSA wording and terms. The ENISA whitepaper was referenced a few times but really not a whole lot (the questions from it are labeled). I read through the CSA Guide and skimmed through the ENISA doc in prep. The CSA Guide is definitely the main source you will need to be familiar with for this exam. It is open-book, technically, but the questions are worded pretty well to test knowledge rather than your ability to search a PDF quickly.

Find more posts tagged with

Comments

JoJoCal19

Congrats on the pass!!!

JDMurray

For those in need:

https://www.amazon.com/CSA-Guide-Cloud-Computing-Implementing/dp/0124201253/ref=sr_1_1?s=books&ie=UTF8&qid=1481910303&sr=1-1&keywords=csa+guide+to+cloud+computing

https://downloads.cloudsecurityalliance.org/assets/research/security-guidance/csaguide.v3.0.pdf
https://www.enisa.europa.eu/publications/cloud-security-guide-for-smes

DAVIS NGUYEN

Congrats!

navdod

Congratulations. Can you mark a question for review and return to it later in the test to change your answer?
I have seen AWS and other CSP jobs asking for CISSP, but have'nt see any ask for CCSK or CCSP. Do you see that changing and do you find the knowledge gained from CCSK & CCSP help you become more successful at CSP jobs?
Thanks

jayc71

You can mark a question for review, but I found that this didn't save the answer you had selected and the question was not marked as completed. You had to actually go back to each of them and save your answer before ending the exam or they would, I presume, be marked incorrect.

I've seen some Cloud Security job descriptions come through that do ask for the CCSK or CCSP, but not quite a lot just yet. I think the field is still emerging and companies aren't certain of newer certs or just don't know the skills needed just yet. Studying for the CCSK or CCSP is definitely a benefit if you are in the CSP market, it is a lot of great knowledge but it is general stuff. You'll likely need to immerse yourself in a companies actual security needs.