hello,
sometimes, books are theory based and it's for your understanding. However, it should be noted that most exams test you on how to apply the tools you've learned, not churning out facts. (although simple ones like social engineering, ethics and moral is there for few marks!)
so the best for you to pass the exam is to do a lot of sample questions. like i mentioned before in the previous thread, the nearest and closed to the real exam is the Pass4sure test which consist of 600 questionnaires in it. (disclaimer- I'm not promoting for them!).
In addition, i also noticed that the exam focused a lot on the following:
1) Nmap (types of scan -O, -U, Xmas, and interpret the scan results using which switch etc)
2) Snort capture results (IDS)
3) know how to read ethereal results (sniffing)
4) enumeration (Netbios, SMB, types of port used 137, 139, 445)
5) analyze the logs result (mostly buffer overflows)
6) Sql injection attack on website
7) use of Net-cat

interpret the C or C++ codes (mostly related to buffer overflows again)
9) pwdump, lophtcrack and know how to read the password hashes (less < 7 char)
10) types of DDOS / DOS -> Smurf (ICMP) and fraggle (UDP)
I hope that helps and good luck.
Cheers,
kennut