The Ethical Hacker Network

Mohsin Hafeez

Newbie

Offline

Posts: 19

Security+

« on: October 07, 2009, 05:52:02 AM »

Hi everyone, my name is Mohsin Hafeez. I am a CCNA, working as a Network Engineer at datacraft. I want to get into security. Initially i was thinking about doing CCNA Security, but now I have second thoughts because CCNA security is a new certfication, dont know if it is worth it and also it is vendor specific. I was thinking about doing Security+ or CEH. Dont know if i can do CEH coz i'll have to show experience in Network Security for that exam. Any suggestions?


	Logged

CCNA, MCP, CCIE Security Written, JNCIA(FWV/VPN)

Equix3n-

Sr. Member

Offline

Posts: 386

Re: Security+

« Reply #1 on: October 07, 2009, 06:04:38 AM »

Security+ is a nice certificate if you are just starting out in security.

I can't say how much EC-Council adhere to their 2yrs. experience rule; their have been multiple cases where EC-Council has allowed students who had no experience in security whatsoever, to sit for the examination.
Perhaps, writing them a letter could help.


	Logged

Ketchup

Hero Member

Offline

Posts: 1021

Re: Security+

« Reply #2 on: October 07, 2009, 06:33:23 AM »

Security+ is a decent cert to start with. I am mostly with you on the vendor-specific certs, although I began with MCSE:Securit myself. Sometimes vendor certs are a good place to start.

I have always advised people to take a second look at their resume when it comes to security experience. This is especially true for network engineers. How much of your time is spent managing ACLs on a firewall or router? How much time do you spend managing anti-virus or anti-malware software? Do you secure resources with NTFS and Share permissions? These are all part of security. When you are sitting for exams that require experience, my advice would be to structure resume to highlight your security experience.

I would suggest that you pick up a programming language or four, if you don't already have this knowledge. Scripting is also a huge plus. Linux is a must, if you are getting into the security industry.


	Logged

~~~~~~~~~~~~~~
Ketchup

Data_Raid

Full Member

Offline

Posts: 165

Re: Security+

« Reply #3 on: October 07, 2009, 02:10:21 PM »

I'll echo what Ketchup said, Security+ is a good cert to start with, I started with Security+ and then went C|EH and I feel it gave me a good foundation.
Regarding the C|EH exam and experience, you can register for the exam if you attend the live training. If you persue the self-study route then you need to show at least 2 years security related experience.

" Eligibility Requirements

To be eligible for appearing in the CEH certification examination, you must:

   1. Have attended training for the CEH course at any of the accredited training centers. Should you choose to defer taking the examination after your training, and would like to opt for another location; you can apply for the same at a later date at any ATC of your choice by submitting your certificate of attendance to EC-Council.
   2. If you have opted for self-study and not attended training, you must have at least two years of information security related experience.

   Please download and complete the CEH Exam (EC0-350) Application Form and fax it to EC-Council at +1-505-212-0667 for verification. Upon approval, EC-Council will send you an eligibility voucher number which you can use to register and schedule the test at any Authorized Prometric Testing Center globally. Please note that Prometric Registration will not entertain any requests without this voucher number"

http://www.eccouncil.org/takeexam.htm


	Logged

All men by nature desire knowledge.

Aristotle

UNIX

Hero Member

Offline

Posts: 1235

Re: Security+

« Reply #4 on: October 09, 2009, 01:14:38 AM »

Are you interested in CISCO devices or could imagine that you work in a company which is focusing on them? If so, I would say CCNA Security would be a good choice. Although it is new, I already saw a few employers asking for it.
Security+ by CompTIA is good as well and vendor-independently, so if you have the possibility, go for both.

In terms of CEH, do what Ketchup suggested. Structuring your experience is a good way to highlight your skills and, as already stated, EC-Council allowed a few students to sit for the exam without 2 years of experience or taking their classes in the past. It doesn't hurt to ask. Wink

Good luck.


	Logged

3PIL0GU3

Newbie

Offline

Posts: 38

Re: Security+

« Reply #5 on: November 17, 2009, 07:48:28 AM »

I got my CEH last year and mess around with security ion a daily basis just wondering how hard the security + cert is would I just be able to go for the exam without further study or are there more strenuous topics I need to know such as more complex algorithms and reverse engineering coding


	Logged

----------------------------
CEH

hiddenillusion

Newbie

Offline

Posts: 26

Re: Security+

« Reply #6 on: November 17, 2009, 11:48:33 AM »

It's not a hard exam, it's meant to be entry level. While some people bash it, it actually accounts for more than people think. It can count as (1) one year off required experience for some certifications and the US DoD 8750 recognizes it as Level II Tech.

www.giac.org/8570/
www.dtic.mil/whs/directives/corres/pdf/857001m.pdf


	Logged

GCIH, ACE, OSCP, CCNA, CEH, CHFI, Security+

KamiCrazy

Jr. Member

Offline

Posts: 78

Re: Security+

« Reply #7 on: November 17, 2009, 02:46:18 PM »

I think the security+ cert is great. Simply because it can count towards a cross credit for so many other things.


	Logged

unsupported

Sr. Member

Offline

Posts: 318

Unofficial Newbie Moderator

Re: Security+

« Reply #8 on: November 18, 2009, 11:45:24 AM »

I know it takes a year off the CISSP 5 year requirement as well as acts as an elective for the Microsoft MSCA(E?):Security. I really liked the Security +. It was my introduction into a lot of the concepts I use on a daily basis. A great stepping stone.

I also really liked the C|EH, although I do not do any pentesting for my job, knowing the tools and what the view from the threats point of view has helped me know what to look for on my side.


	Logged

-Un
CISSP, GCIH, GCIA, C|EH, Sec+, Net+, MCP

BillV

Hero Member

Offline

Posts: 1892

Re: Security+

« Reply #9 on: November 18, 2009, 01:45:14 PM »

8570 also recognizes Sec+ as Level I manager. And yeah, counts as an elective for MCSA/E.

I've just recently finished the new EC-Council Press CEH series of books. I'll be posting a review soon. If security/hacking is a new field to you, you'll certainly want to consider this set.


	Logged

UNIX

Hero Member

Offline

Posts: 1235

Re: Security+

« Reply #10 on: November 18, 2009, 04:21:02 PM »

Looking forward to it, Bill.

As already mentioned, Security+ is good for several reasons, where one is certainly the 1 year off of the CISSP requirements. Also, if someone is serious about CISSP, S+ shouldn't be a problem at all.


« Last Edit: November 18, 2009, 04:22:43 PM by awesec »	Logged

Pages: [1] Go Up

« previous next »