Security+ (split from "Getting started in the security field")

[justjake]

I'm not quite sure if it relates, but I'm taking the Security+ test on the 1st of next month. Small steps. First I questioned why Ethereal didn't pick up the "..." in the scan for MAC address's, now i'm edumacated about Policy's and Procedures and hot-sites. :) If there is anything I should focus on(i.e ports, types of attacks, encrytpion) any feedback would be greatly appreciated.

Jake

[dYn4mic]

First I questioned why Ethereal didn't pick up the "..." in the scan for MAC address's..

The 'scan' for MAC addresses? Ethereal doesn't scan... (are you thinking ettercap?)

The "..." ?? What do you mean by "..." What was the capture filter?

/me is confused

What do other people think about the Security+ cert? Worth getting or don't bother?
(I guess it couldn't hurt...)

*edit*after a discussion with a friend, some people see ethereal as a 'scanner' some see it as a protocol analyzer. When I think about scanning, I think actively introducing traffic on the wire/air... But, you can also 'scan' with a radio, which is completely passive.. So.. its all a matter of your perspective. Or... as a wise man once said "Its all relative"

[theprez98]

What do other people think about the Security+ cert? Worth getting or don't bother?
(I guess it couldn't hurt...)

I think if you can get someone to pay for it, any reasonably accepted certifcation is probably worth getting. But paying loads of cash yourself just to be able to add some letters to your resume is another thing.

[justjake]

The 'scan' for MAC addresses? Ethereal doesn't scan... (are you thinking ettercap?)

The "..." ?? What do you mean by "..." What was the capture filter?

/me is confused

What do other people think about the Security+ cert? Worth getting or don't bother?
(I guess it couldn't hurt...)

*edit*after a discussion with a friend, some people see ethereal as a 'scanner' some see it as a protocol analyzer. When I think about scanning, I think actively introducing traffic on the wire/air... But, you can also 'scan' with a radio, which is completely passive.. So.. its all a matter of your perspective. Or... as a wise man once said "Its all relative"

my saga with Ethereal and the questions raised can be found here:
I suppose should have use the term sniffer.. its these distinctions that could kill me on the test.

http://forum.defcon.org/showthread.p...2289#post72289

But anyway, I digress...
I sure appreciate any input. google was kind of useless
http://www.google.com/search?hl=en&q...ke+security%2B

(said with tongue-in-cheek)

[Clp727]

I have a Security+ cert from CompTIA. It looks nice in the frame on my shelf at work. I never really asked my employer if it had any bearing on being hired. I honestly doubt it did with him. He is the top (I.T.) dog in our organization, yet he only has an MCP cert. His skill level is way beyond that. Our LAN manager is has dual MCSE certs, and she knows her stuff. Did that get her hired? I don't know, but I'm jealous!!
The Security+ test was easy for me because I have a sincere intrest in it. I absorbed the material like a sponge and was able to pass. I figure if I could pass the exam...anyone could. It covered most of everything we went over in class. Keep in mind..Security+ is very basic.

Good luck!

[SlackJaw]

I have linux+ because I thought if was "cool" when Comptia first offered it - I believe it was 2002? Woot! I still can't get POP to work after I migrated to a better web/mail server I built. (Any takers wanna ssh in?) and I have a generic DB certification. I have that retarded IC3 but only because I tested out of an intro class. I'm getting security and A+ this summer. I guess I'll get MCSA because I have vouchers given to me where I can take 4 exams @ half price. My long term goals are CISSSP and maybe a Red Hat Cert for the hell of it.

I wish I wasn't a lazy fuck and had them already - for those who have seen my "job interview" post, which is tomorrow morning, now I'm sweating it, all because of a lack of "paper."

Oh, but let them offer "farting 101" or "sex+" and I'll bet I'm first in line.

Tommy

[Clp727]

The University that I attended offers a coarse to obtain the linux+ cert. They didn't offer any UNIX coarses what so ever. I wanted to take it but didn't. Now I get a job with a company that has a Windows network with multiple (20+) Windows servers, and two Unix servers that are running AIX, and a couple of other boxes that are linked to some of the medical equipment that run HP-UX.
It would have been a feather in my cap if I had just a hint of an idea of what to do in a 'nix environment. We have to pay for outside support.

[SlackJaw]

The University that I attended offers a coarse to obtain the linux+ cert. They didn't offer any UNIX coarses what so ever. I wanted to take it but didn't. Now I get a job with a company that has a Windows network with multiple (20+) Windows servers, and two Unix servers that are running AIX, and a couple of other boxes that are linked to some of the medical equipment that run HP-UX.
It would have been a feather in my cap if I had just a hint of an idea of what to do in a 'nix environment. We have to pay for outside support.

Ain't but one way to be down with Tux...and that's find a old box, load up a distro with at least decent documentation, DO NOT INSTALL A GUI and just dig in and fuck it up. Then, find one of those anti social, MS Hating closet geeks who was bashing at age 3 and befriend him. You NEVER "learn" linux, you just keep getting better. Start hacking away at the command line my friend and you'll be rooting in no time.

Tommy