I had sat the exam on May 25th after an excruciating one-week bootcamp and six months of intense self-study with Shon Harris' 4th edition guide and a few marathon sessions of CBT nuggets. I felt blindsided by the topics in the actual exam to the point that I was reasonably sure that I hadn't passed. Fortunately, ISC(2) found otherwise and sent me the notification last Monday.
Ironically, I had drilled myself on the security models (Bell-Lapadula, Biba, Clark-Wilson, etc.) but didn't get many questions covering that section. I did get quite a few questions on BCP and Common Criteria, as well as a bunch of questions covering application security and risk management.
The instructor in the bootcamp was phenomenal (he was a contributor to some of the material in the official ISC(2) guide). The tips he had for the exam are what probably made the difference between a pass and fail. The CBT nuggets were also a good complement to the material in the book.
I'm just glad it's all over.
