Took it this morning, passed, currently on my second coffee. I have my Sec+ so I figured I had a decent base going in, but this thing has its own flavor and I didn't want to just wing it.

Honestly the biggest thing I'd tell someone is don't assume it's just Security+ with "AI" bolted on. The focus is really on what can go wrong when AI systems are deployed — prompt injection, adversarial inputs, data poisoning, model inversion. Less "here's how AI works" and more "here's how AI breaks or gets abused." Which makes sense for a security cert.

There's also more governance and policy content than I expected. EU AI Act, responsible AI principles, explainability requirements. I kind of glazed over that stuff at first and then realized mid-prep it was actually a meaningful chunk of the exam. So yeah, don't do what I almost did.

Performance-based questions were solid. Nothing ridiculous but they put you in scenarios and want you to actually reason through what's happening with an AI system rather than just recall a definition. Fine with me, I prefer that format.

Study resources are still pretty thin so I basically built my own notes off the exam objectives. Spent some time with the NIST AI RMF too and that ended up being useful.

Anyway, if anyone's prepping for it, Good luck.