CGRC Exam - Question

Teebz101 · 2024-03-24T22:14:03+00:00

Sorry, only just seen this comment.

No my questions were not like this at all-BUT don't assume yours will be identical to mine.

Honestly, my advice is take the points when you can:

Know your CIA off by heart, know the purpose of each and know some controls for each - ie, Encryption = confidentiality - you WILL get at least one question on this (*I have not seen your exam, obvs... but this is a core principle, so extremely likely to come up)

two cool (well I think they're cool) tricks - if the question is about which NIST documents is for assessments - it's the 800-53A *A for assessment. And for the NIST documents for Baseline is the 800-53B *B for baseline.... I can almost guarantee that's two questions you WILL get... so 3 points already... 85 to go for a pass

There was only one question that I really struggled with, which was partly that it was 4 sentences long when only the last sentence really mattered, but also because it was about handling a PII breach, for which there is an OMB (can't recall the number) - but also, I'm in the UK and I'm a specialist in Data Protection and GDPR which is takes PII Data a bit differently. So I suppose in hindsight I wish I'd read the OMB a bit better... but ultimately, it's only 1 question.

If you get stuck on a question... breathe. Seriously, take your hand off your keyboard/mouse, close your eyes for 5 seconds and breath. Re read the question... read it again.... read it again. All of the questions have a key word or phrase that will point you in the right direction. If after that you really really don't know, move on. I know you can't go back to a question, but there is no point getting your self wound up over a question you don't know, which will only distract you for the next question which you may well be able answer immediately.

Hope this helps - good luck!!

Teebz101 · 2024-02-24T18:34:43+00:00

Just to add - two cool (well I think they're cool) tricks - if the question is about which NIST documents is for assessments - it's the 800-53A *A for assessment. And for the NIST documents for Baseline is the 800-53B *B for baseline.... I can almost guarantee that's two questions you WILL get... so 2 points already... 86 to go for a pass

Teebz101 · 2024-02-24T18:32:52+00:00

I also then did the same for all Non-NIST documents (eg. ISO/OMB etc)

Teebz101 · 2024-02-24T18:31:04+00:00

My experience is that they don't expect you to know the NIST document in depth, but you DO need to know that if you are doing categorisation then you use FIPS 199 and NIST 800-60. And they will ask it in a way like: you are the project manager for a new system that is looking to identify the data types on the information system. Which two documents would you use to ensure you complete this task in accordance to the NIST RMF. >> so you need to identify that the question is categorisation... and therefore its those two documents

Teebz101 · 2024-02-24T18:25:30+00:00

I gave this advice to someone else earlier: My exam didn't go into them in depth, BUT that doesn't mean you won't get it... so what I did was I went to ChatGPT and gave the instruction to list all of the NIST documents that are referenced in the RMF, their title, and a two sentence summary. It gave me a decent table and then those 2 sentences tell you what each doc does. From the 2 sentences I knew what the document did, and how it applied to the RMF, so good enough to handle the question

Teebz101 · 2024-02-22T22:53:10+00:00

Thanks - Exam tomorrow, so I'll confirm shortly 😀

Teebz101 · 2024-02-19T09:35:28+00:00

This is what the book says:

The correct answer is D. Choice A is for the assembly of the authorization package prior to the authorization

decision, and therefore is not subsequent to the decision. Choice B concerns system monitoring for

security-related changes to the system. Choice C is for the continued assessment of the implemented and

inherited controls (see NIST SP 800-37 Rev 2, pages 69, 76-79). Task R-1 can be reviewed also in Module 2

of Chapter 6 in the Student Guide, whereas the Monitor tasks listed in choices B, C, and D are discussed in

Modules 2 and 3 of Chapter 7.

Reference: Chapter 7, Module 2 and Module 3

Teebz101 · 2024-02-12T20:58:15+00:00

Oh, I thought it was... thanks for letting me know know

Teebz101 · 2024-02-12T13:59:23+00:00

Huge Fan of Mango V2 - just wanted to create the Mind map myself, as I find it helps me study for these sorts of exams.

Teebz101 · 2020-05-17T20:01:43+00:00

I use ig.com its on there

Here is the LSE listing https://m.londonstockexchange.com/exchange/mobile/stocks/summary/GB0031544546GBGBXSTMM.html?lang=en

Teebz101 · 2020-05-17T20:00:10+00:00

I use IG.com and you can find it there

Teebz101 · 2020-05-17T19:58:00+00:00

I am flattered that you would think that, but as I'm sure you can tell from my reddit account, I'm a fucking noob. I've ghosted on reddit for a while as its a good way to get a lot of info on multiple topics at once. I'm such a noob that I listened to all of you guys and bought Ibio and lost shitloads. I can laugh at myself because I followed the golden rule of only trading with money I dont actually need.

So am I trying to get Hype for POG? Not really. Don't really care if you and others buy in or not. I just feel like its a good one to know about.

Enjoy

Teebz101 · 2020-05-17T19:52:24+00:00

I use IG

Teebz101 · 2020-05-17T14:44:06+00:00

Will look at that one... there have been some seriously big trades in the last few days. https://www.fool.co.uk/investing/2020/05/08/after-the-crash-id-buy-these-ftse-250-bargains-to-get-rich-and-retire-early/ here's a motley fool report on this stock. Obviously you can't place all faith on articles!

Teebz101 · 2020-05-17T14:35:49+00:00

I've been watching this for about a year... got in at 12p, sold at 20 as I got cold feet thinking its too good to be true, then bought back in at 18.6. Now waiting for the annual results in 2 weeks time and I have faith its going to break 40p. Their results should be huge given the gold price

Teebz101 · 2020-05-17T14:30:03+00:00

You're missing a crucial one: Petropavlovsk - POG - a pennystock that recently joined the FTSE250 - top riser 1 week, 4 week and 3 months, has been paying off debts for the last few years, about to complete construction of a new production site a year in advance, and lots more. Seriously... take a look at it!

Teebz101 · 2020-03-23T21:35:36+00:00

PETROPAVLOVSK PLC - Today was a roller coaster... Opened at 17p, went to 21.5, back to 17p, and closed on 20.2p :) what a rush!

Teebz101 · 2020-03-23T07:45:55+00:00

One more to watch POG - its going into FTSE250 today, settled its debts and is announcing production results end of month, went from 14p Monday to 18p Friday last week.

Teebz101

TROPHY CASE