Any IT Security Heads here?

Damn, this is a dope thread. I have decided I'm going to study for the security + and take this test in by the end of October. I don't know much about computers like that but I have a pretty good memory. I have the dumps for the 501 and I've started watching professor messer. I'm going to assume I should be good in a few weeks. I got to get out of claims adjusting. Its pretty good money but that shit too stressful.

You got any IT experience? Good luck bruh!!
 
Damn time flies. 5 years ago didn't know shit about security and today I just passed my CISSP. About to keep it rolling and get this CCSP and AWS Solutions Architect in the next 4 months. After that my job better get they check book out or its adios lmao.
Congrats on your CISSP. I did not pass my first time in February. Can you offer any advice?
 
Damn time flies. 5 years ago didn't know shit about security and today I just passed my CISSP. About to keep it rolling and get this CCSP and AWS Solutions Architect in the next 4 months. After that my job better get they check book out or its adios lmao.
Huge win for sure. Congrats! I hear the CISSP is the gold standard
 
Damn time flies. 5 years ago didn't know shit about security and today I just passed my CISSP. About to keep it rolling and get this CCSP and AWS Solutions Architect in the next 4 months. After that my job better get they check book out or its adios lmao.

Congrats, fam. Keep up that momentum.

:cheers:
 
Congrats on your CISSP. I did not pass my first time in February. Can you offer any advice?
Thanks man. I didn't really think it was going all that well for myself either so when the test stopped at 100 questions I couldn't believe it.

As far as tips, know the order of things really well. If there is a standardized process for something(BCP, DR, SDLC, kerberos, etc) you should know the flow and be able to state what step you are in based on a given scenario. I had to keep reminding myself that security's job is to keep the business operational and to think about it from a managerial prospective. So there were some questions like "whats the MOST important issue here?" and my first security instinct would be to say "the unpatched web server", i had to take a step back and choose and answer like "clients unable to access application". Also watch how they try to see if you are paying attention by by throwing in one little word that makes and otherwise accurate statement incorrect. I noticed several questions like that. Good luck with the next attempt!
 
Damn time flies. 5 years ago didn't know shit about security and today I just passed my CISSP. About to keep it rolling and get this CCSP and AWS Solutions Architect in the next 4 months. After that my job better get they check book out or its adios lmao.
:bravo: :bravo:
 
Thanks man. I didn't really think it was going all that well for myself either so when the test stopped at 100 questions I couldn't believe it.

As far as tips, know the order of things really well. If there is a standardized process for something(BCP, DR, SDLC, kerberos, etc) you should know the flow and be able to state what step you are in based on a given scenario. I had to keep reminding myself that security's job is to keep the business operational and to think about it from a managerial prospective. So there were some questions like "whats the MOST important issue here?" and my first security instinct would be to say "the unpatched web server", i had to take a step back and choose and answer like "clients unable to access application". Also watch how they try to see if you are paying attention by by throwing in one little word that makes and otherwise accurate statement incorrect. I noticed several questions like that. Good luck with the next attempt!

Also, the key to passing the exam is to look at the information from an executive/management point of view. Everything is about finding the best solution out imperfect means. Also, if you see an question that has insurance as one of the answers, then choose the answer with insurance as that is the transference of risk. A lot of tech people have trouble passing the exam because they're unable to switch gears into decision making mode. Remember, Information\CyberSecurity posture is based upon risk management decisions from management stakeholders, so think like them..
 
Got an update from Cybrary - They have a new course focused on Penetration testing & Ethical Hacking:

You’ll also be equipped to sit for and pass industry certifications such as the EC-Council CEH.

You’ll learn:
• Footprinting and Reconnaissance
• Scanning Networks
• Enumeration
• Vulnerability Analysis
• System Hacking
• Malware Threats
• Sniffing
• Social Engineering
• Denial-of-Service
• Session Hijacking
• Evading IDS, Firewalls and Honeypots
• Hacking Web Servers
• Hacking Web Applications
• SQL Injection
• Hacking Wireless Networks
• Hacking Mobile Platforms
• IoT and OT Hacking
• Cloud Computing
• Cryptography
 
one of my brothers told me to try get into IT.
Got TryHackme for some basics, CISSP course for free from Cybrary and some free Microsoft courses (PowerBI). I keep hearing that I need to get Security+ to start. Can anyone in the field point me in the right direction?
 
I would start with Security+. It's basically the go to entry level IT cert. IT has several niches, so once you get familiar, you can pick a field to become proficient in. Some of the more popular ones are Network engineer, Identity Management, Splunk, SOC Analyst and Vulnerability Analyst.

CISSP is more on the management side vs hands on work. It looks good on paper, but I've only met a few CISSP cert holders that were truly technical. I have a family member who works with PowerBI, that's programming, not IT.

**Also, read this thread - Lots of info here.
 


I would start with Security+. It's basically the go to entry level IT cert. IT has several niches, so once you get familiar, you can pick a field to become proficient in. Some of the more popular ones are Network engineer, Identity Management, Splunk, SOC Analyst and Vulnerability Analyst.

CISSP is more on the management side vs hands on work. It looks good on paper, but I've only met a few CISSP cert holders that were truly technical. I have a family member who works with PowerBI, that's programming, not IT.

**Also, read this thread - Lots of info here.
Thank you both

Udemy or coursea for the Security+?
 
one of my brothers told me to try get into IT.
Got TryHackme for some basics, CISSP course for free from Cybrary and some free Microsoft courses (PowerBI). I keep hearing that I need to get Security+ to start. Can anyone in the field point me in the right direction?
I did a tech project. A guy with NO experience got security plus and got hired. Get network and security plus for some good basics. Cissp is more advanced
 
Ok, so this isn't like other certifications like HVAC where you have to go to a paid training before you can test? I can pay attention to the videos and pay for the test in 2 months?
 
one of my brothers told me to try get into IT.
Got TryHackme for some basics, CISSP course for free from Cybrary and some free Microsoft courses (PowerBI). I keep hearing that I need to get Security+ to start. Can anyone in the field point me in the right direction?
Bro I got a plus n plus and s plus and it's not that easy to get into it.

Imo the security plus is worthless without experience I would get ccna first then s plus.

The low end jobs are garbage.

I'll hit you up later I should have a security plus book and labs somewhere at home..
 
Bro I got a plus n plus and s plus and it's not that easy to get into it.

Imo the security plus is worthless without experience I would get ccna first then s plus.

The low end jobs are garbage.

I'll hit you up later I should have a security plus book and labs somewhere at home..
Ok thank you
I just wanna get started. It's hard to get into here in Nashville but I'm gone see if the VA will give be a look once I'm certified
 
Wow just found out about this thread. Recently got my Google Cybersecurity Cert. working on my Sec+
Have you attempted to get a job with it and do you think recruiters reached out more?

I'm in the middle of the Meta Front End Developer course. Honestly, I wouldn't really accept a job with the cert, but it's still beneficial for my current role.
 
Have you attempted to get a job with it and do you think recruiters reached out more?

I'm in the middle of the Meta Front End Developer course. Honestly, I wouldn't really accept a job with the cert, but it's still beneficial for my current role.
I took it as part of a veterans program that supposed to help get a career based on that cert. I have an interview today for that program. The cert comes with a discount for the Sec+. During they course they make it seem that the cert will get you in the door.
 
Back
Top