Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 21 guests and 1 member online
 
Advertisement

You are here: Home
EH-Net
May 25, 2013, 05:30:11 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
  Home Help Calendar Login Register  
  Show Posts
Pages: [1]
1  Ethical Hacking Discussions and Related Certifications / Security / Re: Study habits for the CISSP. on: February 16, 2011, 10:29:42 AM
Thanks for all the comments.  I'll definitely check out the Shon Harris videos, thanks for the suggestion H1t.  As well the CISM evaluation might come in handy.  Since i don't really know the format or "feeling" of the questions on CISSP, I've been casting a pretty wide net and relying on memory techniques.

For example, I'm not sure i need to be memorizing the ISO/IEC specifications 1, 3 and 4 for Smart Cards.  But it seemed like it could make a pretty good test question, so I've got things like: 

The ISO/IEC 14443 standard outlines the following items for smart card standardization:  [...]

----------

The ISO/IEC 14443 standard outlines the following items for smart card standardization:  ISO/IEC 14443-1 Physical Characteristic, ISO/IEC 14443-3 Initialization and anticollision, and ISO/IEC 14443-4 Transmission protocol

My gut feeling is that this is creeping into the line of overkill, but it's easily memorized (especially with an SRS system backing me up).

I can see your point about focusing on the things you find more interesting.  My goal has been to get the CISSP and then I get to reward myself with the things that really get my brain ticking.  Certs like OSCP, C|EH, RHCE, GSEC and GPEN are all exciting to me and hopefully will help me fulfill my CPE requirements once I am able to pass the CISSP.

I have to be honest, and I'm sure this community hears this a lot, I feel a lot more directed in my career and personal improvement goals.  I've been an System and Network admin for more than ten years and while I love my job I really like having the impetus provided by focusing on the security field.

2  Ethical Hacking Discussions and Related Certifications / Security / Study habits for the CISSP. on: February 16, 2011, 12:42:49 AM
Once I decided to shift my career focus from System and Network Admin towards Security, I got really nervous that studying simply wasn't my strong suit given my time constraints.  Between family obligations (Married and father to a three year old girl) and professional obligations (Renewing my CCNA or getting CCNA:S and I really should be reading Powershell in Action instead of EH!) and even just personal hobbies (Getting into the Arduino, studying Japanese, and yea, I knit).  All these things that have claims on my time and one of my biggest weaknesses is my impatience.  So, deciding to sit for the CISSP, I picked up the Shon Harris book and just started reading and highlighting.  I'm sorry to say that I got quickly overwhelmed.  Not that the material is too difficult, but I was reading in the vicinity of 30 to 50 pages a night. 

So I decided to try to take a long view (Marathon not a sprint!) and swapped my study habits to what is listed below. 

  • Read 15 pages of Shon Harris' CISSP All-In-One
  • Each night, highlight passages or concepts that would make good test questions.
  • At the end of 15 pages, fire up Anki and review the notes I made with the highlighter and enter each in question format with chapter tagging.
  • Try to clear my Anki reps every day and set the new fact number to 20 per day.
  • When I've finished the All-In-One book and worked through my Anki deck take some practice exams and note where I fell short.  Review those chapters and reset my Anki counts for those chapter tags.
  • Take the exam
  • If I fail reread the book and maybe look into a boot camp type of prep course

For reference Anki is a Spaced Repetition System and has worked miracles for my studies in Japanese, I think it will easily translate to CISSP studying.  I've been using the Cloze deletion technique for my facts, so it forces me to memorize versus hunt for an answer in multiple choice.

I chose 15 pages a night because it allows me to get through a decent amount of information without finding myself up at 2am and too tired to pick up my CCNA books or even enter the CISSP info into Anki.  I'm currently at page 375 and if I can manage to read at least 5 nights a week I'm projected to finish the book in about 15 weeks.  If I manage it every night of the week, I'm projected to finish in 10 weeks.  From what I've read about the CISSP, I feel that's a significant amount of time to study and really familiarize myself with the information. 

If anyone has any thoughts or comments or even warnings, I'd greatly appreciate them. 
3  Ethical Hacking Discussions and Related Certifications / Networking / Re: Renewing CCNA on: February 16, 2011, 12:18:41 AM
Don't be too worried. The CCNA:S is like Security+ but from Cisco. You can probably study up and pass it without too much work. I think my CCNA took me like 5 months but the CCNA:Security took like a month and a half.

Thanks knwminus.  I'm still going to re-read the Todd Lammle book and throw my notes into an SRS system to get myself back up to an acceptable base of knowledge with Cisco.  Any suggestions on CCNA:S books?
4  Ethical Hacking Discussions and Related Certifications / Networking / Re: Renewing CCNA on: February 07, 2011, 03:34:23 PM
I remember trying GNS3 back when I was originally studying for my CCNA but I recalled having a lot of trouble with it.  I'm sure it's made some serious strides in 3 years so I'll check it out again. 
5  Ethical Hacking Discussions and Related Certifications / Networking / Re: Renewing CCNA on: February 07, 2011, 03:13:05 PM
I actually really like the idea of going for CCNA:S but I my main worry is that I'm out of practice.  I still have the Lammie book and my certification doesn't expire until November.  I've been considering re-reading the Lammie book and feeding key parts of the text into Anki and constantly reviewing until I have a solid hold on those.  For hardware, I'm likely to either try GNS3 ( it wasn't very mature when I used it three years ago ) or I'll try to scavenge some old Cisco routers we have around the office if possible. 

Hopefully I can manage this along with studying for CISSP.  If I manage my time at night after the kid has gone to sleep and try not to hurry, I think I can pull off both (well, i guess it's all three). 

Does anyone have any good resources for starting with CCNA:S? 

And again, thank you for the advice.  I'm new to EH and so far, things has been very encouraging. 
6  Ethical Hacking Discussions and Related Certifications / Networking / Renewing CCNA on: February 05, 2011, 10:43:14 AM
My CCNA cert will expire near the end of this year.  When I originally took the exam I took a week course and then went home and studied through the Todd Lammie book (http://www.amazon.com/CCNA-Certified-Network-Associate-640-802/dp/0470110082/ref=ntt_at_ep_dpi_1) .  Unfortunately, at work, we moved away from Cisco equipment and i haven't touched one in probably two years.  So I'm out of practice. 

Does anyone know if the Lammie book is still a good resource or has the test changed enough in three years? 

Does anyone know of a good way to get some hands on experience to test?  I haven't seen a way to virtualize an ios environment and some of the simulators leave a lot to be desired. 

Thanks in advance.
Mac
7  Ethical Hacking Discussions and Related Certifications / Security / Re: CISSP AIO by Shon Harris on: February 04, 2011, 09:48:57 AM
I've got the full meal deal with the dead tree pages, dvds... you name it.  I'm just using the book for now, since I feel I should get some use out of that thing other than a door stop, or something to smack a burglar with.  Though.. if I had a kindle, I'd probably use it. :/  Santa never arrived with one this year heh, maybe next year.

Yeah, I've been doing crossfit for about 4 years now.  First time in my life where I really ENJOY working out instead of it being a chore to keep in shape heh.  I figure it can be a good side business that is transferable with my work as I move from country to country.  That, and it helps with my surfing heh. 

The Kindle is nice for on-the-spot reading but I still find myself going to the paper version at nights.  One thing I've read about the CISSP exam is that, given it's non-technical content, it's often described as "a vocabulary test," albeit a difficult one.  So I've been using a highlighter to mark sections that I think are likely to be adapted to exam questions.  Then I go back through the highlighted parts and start creating facts in Anki (http://ankisrs.net - a Spaced Repetition System.  I've been using to study Japanese.) and have even considered using Cloze Deletions to make the cards a bit more test-like. 

My only other cert is a CCNA (speaking of which I need to renew that - where am I going to find the time?) and I'm hoping that I can adapt my study methods to a non-technical cert like CISSP.  Once I have that, I'm planning to push into considerably more technical certs to fulfill my CPE requirements. 

How hard is it to start Cross fit?  I've been working on weight loss (calorie counting, etc) and once it's warm I'm hoping I can get back into barefoot/minimal-footwear running. 
8  Ethical Hacking Discussions and Related Certifications / Security / Re: CISSP AIO by Shon Harris on: February 03, 2011, 12:30:57 AM
Not sure if you got the book with the DVD included, but if you did, there is a chapter-by-chapter copy of the book in PDF format included on the DVD.  Pretty nice for tossing onto the Kindle/iBooks/etc instead of carrying that brick of a book around.  When I'm reading at night, I've taken to reading from the dead-tree version, but when I'm at work or waiting for my daughter at daycare, I hop to pdf on the Kindle. 
9  Ethical Hacking Discussions and Related Certifications / Security / Re: CISSP AIO by Shon Harris on: February 01, 2011, 07:05:22 PM
Just went through the copy I bought today (recently decided to push from System/Network Admin into heavier security and work towards a cert) and only counted 8 diagrams in 50 pages that I selected entirely unscientifically.  It varies, obviously, but as I look through it, it's not what I would consider diagram heavy, and what diagrams it has shouldn't really look too bad on a Kindle. 
Pages: [1]
Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.059 seconds with 22 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.