I passed the CASP exam yesterday, and let me tell you, it was quite the doozy. My test had 80 questions, with nine of them being simulations! 5 of them were drag and drop and the other ones involved modifying firewall rules, downloading and installing a patch, one that involved crashing a server and another about implementing controls within a certain budget.
Prep:
I used the Abernathy book and the question bank from that.
I used the Sybex book for the question bank only.
I listened to Kelly Handerhan’s audio for the CASP while traveling back and forth to work.
I used the CASP exam objectives and ensured I knew something about each item on the objectives. Google and YouTube are your friends to fill in gaps.
I also recently finished a MS in InfoSec; this is unnecessary for the exam
.
Tips:
Know SaaS, PaaS, and all of the cloud based iterations and acronyms.
Know SLE, ALE, etc.
Know what DNSSEC is and what it is used for.
Know Kerberos, SAML, etc. and what they are used for.
Know your ports, especially HTTP and HTTPS.
This is both a technical and a managerial test. However, I found that more of the managerial answers were the most correct to the questions.
Finally, don’t take this exam lightly. I felt pretty good for the bulk of the questions, but I was still unsure if I was going to pass when I hit submit; mainly due to the difficulty of some of the sims. Some of the questions I had no idea about and had to guess, others I was able to narrow down to two correct answers.
As for me, I am glad that I am finished with the exam. My next cert goal will be the CySA+, because of the DoD and future employment plans. I plan on taking the CISSP sometime next year, as I don’t have the time to focus on the exam at the moment. Feel free to reach out if you have any questions, especially as CAS-002 will be expiring soon and I have a feeling CompTIA will be making all of their exams more difficult going forwards.
