The SOCP exam is in an open book format.
The following are all authorized material for the exam:
Security Onion Documentation Paperback book (Available online here)
Course material for any Security Onion Solutions instructor-led training
Notes (handwritten or typed)
Reference materials having the appearance of exam questions and answers are strictly prohibited.