My advice starts before they start studying or taking courses.
READ THE RECOMMENDED PREREQUISITES.
So many students sign up for classes where they have little to no experience, skills, or preparation.
For example, I lost track of how many times I had students sign up for CySA+ with no cybersecurity experience or IT experience at all. They wanted a job in cybersecurity because they heard it had high salaries, low unemployment, and upward mobility. Salespeople and marketing departments sold them on the idea that with just a few boot camps, they would instantly become employable in mid-career cybersecurity roles.
It doesn't work that way. It never has and never will. People have to start at the bottom and build the foundation first.
The recommended prerequisites for CySA+ are Network+, Security+, or equivalent knowledge, and a minimum of 4 years of hands-on experience as an incident response analyst or security operations center (SOC) analyst, or equivalent experience. It's fairly common to have students that meet few or none of those recommendations. They can only pass the exam through exhaustive test prep, memorization, and practice exams.
But they don't learn anything. Memorization isn't learning. They can't apply any of the information or skills and struggle with the PBQs because they can't USE the information they've memorized.
Read the recommended prerequisites. If you don't meet the recommendations, you're not ready for the class. The purpose of the certification is to validate your skills and experience. It was never meant to be a shortcut so you can get jobs you haven't earned.