IT Certification Forums is home for an active and helpful community with forums for CCNA, MCTS, Network+, Security+ and many other IT certifications en Mon, 28 May 2018 07:05:08 GMT vBulletin 60 IT Certification Forums eCPPT - Journey towards InfoSec starts now. Sun, 27 May 2018 21:30:10 GMT Hello, all.

Been a long while since I posted here. Just passed the CCNA Security a couple of weeks ago.

I'm finally to a point where i have a good foundation to purse an InfoSec career.

About a month ago I received an email from Ethical Hacker. Net about a free course PTS(barebone edition) from E-Learn-Security. I jumped on it, and was ready to upgrade to the elite to utilize the labs, and no expiration, but, I had received the webinar for the PTPV5 & I liked the discount, and the fact that the lab time is deducted by time used & not the day so I enrolled using the installments; With a newborn this was the best route, since study time is limited at the moment but it should get better.

Since my knowledge is limited in pentesting & scripting this should be a better start than OSCP.

Hopefully I can knock this out in 3-5 months. Then I plan on prepping for the OSCP

I came across this book: is this a good one to grab?

Georgia Weidman
Penetration Testing: A Hands-On Introduction to Hacking

I plan on using this as a log for my studies, so more to come!

Thanks! ]]>
Security Certifications Lamplight
mikrotik course/cert Sun, 27 May 2018 20:54:58 GMT Just passed the CCNA and im thinking of what to attack next. At work 90% of the equipment is mikrotik and was looking into to the certs for it, not... Just passed the CCNA and im thinking of what to attack next.
At work 90% of the equipment is mikrotik and was looking into to the certs for it, not much online resources that i can see, except that to certify you hve to actually for a 3/4 day course which seems to be pricey too one figure i saw was 900 euro/$

Is it not possible to train online or hands on then just sit the exam? seems like a bit of a money racket to me from mikrotik.

Anyone got any info on this would be appreciated. ]]>
General Certification Mr.Robot255
220-902 focus question Sun, 27 May 2018 20:27:30 GMT I see a number of questions referring to Vista, XP and Windows 7. Is this really a focus of the exam? Microsoft doesn't even support 7 and I have no idea where I would get a copy of Vista or XP. ]]> A+ RonNewYork Help deciding certification path to take Sun, 27 May 2018 19:22:29 GMT I have been on a helpdesk for the past couple years, and have unlike most really enjoyed it, but know that I have hit the paywall regarding no more... I have been on a helpdesk for the past couple years, and have unlike most really enjoyed it, but know that I have hit the paywall regarding no more room for moving up salary or otherwise. I have experience working with the techs on all things from network monitoring, server management, vsphere/vcenter, and a number of other things. I am CCENT certified working towards CCNA in a month or so. I don't want to get certified for the heck of it, and college isn't my thing right now. My current certifications are CCENT, ITIL V3 Foundations, and CySA+-with that last one just me trying to gain some understanding of cybersecurity.

Networking somewhat interest me, but the thought of sitting around waiting for a link to go red, or spending my days doing no shut commands on err disabled ports doesn't sound very satisfying. I have enjoyed working with VMWare virtualisation, but VCP certs only last two years which seems silly and a cash grab. I am considering doing a training course for MCSA Server 2016 since there is no retraining period for it. I thought about CEH or CISSP, but I couldn't justify those with actual hands-on since I do only a limited amount of cyber sec work.

Far too long of a post. Don't want to certify for the heck of it, want VCP but discouraged by 2 year period, and so thinking MCSA 2016 which is that worth it? ]]>
General Certification locutus24
Scheduled LPI Linux Essentials test Sun, 27 May 2018 18:53:42 GMT I scheduled my LPI Linux Essential test for July. I am looking forward to taking the test. I have been told by some of my peers that the Linux... I scheduled my LPI Linux Essential test for July. I am looking forward to taking the test. I have been told by some of my peers that the Linux Essentials is a good test to help you improve your skills in Linux. I am currently reading my Linux Plus book and watching a-lot of video's for the certification test. If you have any tips that may help my study process please pass them on.

mgmguy1 ]]>
LPI, RHCE, and SAIR mgmguy1
Free LPIC-1 Beta Exams Until June 30, 2018 Sun, 27 May 2018 18:18:47 GMT Stumbled upon this announcement today. LPI is updating exam objectives for LPIC-1 and is offering the opportunity to sign up to take beta versions... Stumbled upon this announcement today.

LPI is updating exam objectives for LPIC-1 and is offering the opportunity to sign up to take beta versions of the new exams for free until June 30, 2018. Registration is not available everywhere: for example, in North America, it's open in Keller, Texas (Dallas/Ft. Worth metro area), and registration is upcoming in Los Angeles and somewhere TBD in Ohio and Tennessee.

I don't remember if you can get LPIC-1 and then turn around and get Linux+...but don't look a gift horse in the mouth! :wink: ]]>
General Certification victor.s.andrei
Websites for Online Labs? Sun, 27 May 2018 17:21:03 GMT Hey All,

I've been interested and looking into online labs (from a general skill set point of view) and created a small list:


I am curious if there are any other similar websites that provide similar services? E.g. MySQL labs. What I am trying to get at is basically any websites that have a paid subscription based service which provides a large library of labs that any IT professional can dive into. I totally understand that it can't replace your traditional DIY labs although I am wondering what other platforms are out there thanks! ]]>
Off-Topic DZA_
Gse!! Sun, 27 May 2018 16:42:37 GMT I had finally obtained the GIAC Security Expert certifications on May 17 after going through a 2 years process of preparing and taking the exam. So... I had finally obtained the GIAC Security Expert certifications on May 17 after going through a 2 years process of preparing and taking the exam. So here I am sharing the good news with the community with my preparation without any disclosure of the exam lab content itself.

The story begins 2 years ago when I had finally decided to go for the GSE Theory exam. The journey was indeed long and difficult, but it was definitely more torturous on the mentality than the actual preparation for the exam itself. Since this is not an ordinary exam, I took quite a while preparing the index using materials from all 3 courses for the GSE Theory. In the end, I took GSEC Windows and Linux, and all 6 books for GCIA and GCIH into the exam hall. I had also brought in the book team handbook written by Don Murdoch for the theory test.

The theory exam wasn't too difficult. I felt that I had over prepared for the theory exam after finishing it. Even though the exam had a time limit of 3 hours against 150 questions, I did not really used the books that much for the exam. However, comparing to a standard SANS exams with 150 questions which had 4 hours allocated for the candidates, the GSE the exam definitely requires the candidates to know his material content well. I walked out with a passed with 84% and about 30 minutes left (can't recall).

After getting the theory exam done, the next step is to book the lab. Initially, I had intended to went for the lab the same year which i had taken my theory. But I decided not to rush and spent more time to prepare for it, which led me to postpone the GSE labs exams until SANS October Vegas last year. To prepare for the GSE labs, I had tried to walk through the practical in GIAC course materials and make the best used of it. As for the reference materials, I had also added study notes from other certified GSE as part of my exam notes. The biggest challenge when preparing for the exams is that I had no idea if I am on the right track of the preparation. I eventually give up preparing for the exam and concluded that I might as well just went for it since there isn't anything else I can work on anymore.

Lab exam day comes, I was definitely anxious. Met up with some of the candidates taking the labs and discuss about how each other was preparing for the exams. Time went by fast and we proceed to register and get seated. There was about a total of 20 candidates who sat for the exam. After finding my seat, I swear there was something wrong with my assigned laptop not being able to connect to the shared server. Tried to follow the handed out instructions twice, I eventually reach out to the lab instructor like a total noob. The lab instructor was definitely helpful and come by to work on resolving my issues. But eventually, they couldn't figure out what's wrong and shifted me to a backup machine. Luckily, I am able to connect to the shared server with the new laptop which sort of calm me down a little.

Everyone starts pouring out their exam notes. Those who live in US can easily bring in more books. I even saw some of the candidates brought in a luggage full of SANS books for the exam. Since I flown in from Asia (and got some stuff in the states to work on), I do not the luxuary of space. After some consideration, I went in with printed notes, blue team handbooks, SANS cheat sheets and GSEC windows and linux.

Time flies really fast while doing the lab. There are so many things to write in for submission. Since I am can't disclose anything, I am going to skip the details. But we definitely had a lunch break at the end of each morning session. During the afternoon session, they also provide some snacks for tea break. Most people won't step out for the tea break, but I figured to go and grab some anyway. While it's really better to maximise every time available for the exam, I am one of those oddballs who believes in taking a break can help to perform better.

So two days gone by... sort of in a similar way. I went out with a heavy heart as I felt I can perform better in some areas. I tried not to think of it. Based on the information from GIAC, they will take a month to mark the exam. During the waiting period, it is definitely a mental journey waking up expecting to hear the news. One month went by, and I got the email morning informing me of my GSE results... I did not meet the criteria to pass the exam. I was devasted... I thought I would have nailed it. Then there is an additional paragraph which reads...


For each person just short of passing GIAC asked the subject matter experts, "Would you be comfortable with this person as the top technical security expert in your company given this body of work?" The answer in most cases was, no. However, in your case the subject matter experts felt that with just a bit more seasoning and hands-on work to address your deficient areas that you would be ready to hold the GSE credential.

The original GSEs were all required to hold at least five Gold credentials before even attempting the GSE lab. Our analysis reveals that success rates are much higher among GSE candidates who do hold multiple GIAC Gold credentials.

This being said, GIAC would like to offer you a unique opportunity to complete additional work in the specified deficient domains to then be eligible to earn your GSE credential. In order to earn the GSE credential it is required that you complete a GIAC gold hands-on research project in the specific areas where you were deficient. The research and writing work will give you additional hands-on skills and seasoning that would have been helpful to you during the GSE lab. Completing this additional research work will compensate for the deficient domains and demonstrate to GIAC that you do have the hands-on skills necessary to earn the GSE credential. GIAC staff will work with the gold program advisors to approve your research topic, which must be technical.
Apparently, I was given another chance to supplement for the GSEC domain which I had failed. GIAC had given me an additional chance to complete a GSEC Technical White Paper as part of the unique opportunity to obtain the GSE. Without any choice, I jump start of working on it. Lucky for me, I had some experience before from working on my GCIA Gold Paper. However, since I am not good at writing and explaining the concept I am writing on. The white paper took me 6 months. After getting the paper cleared, they evaluate the paper update my name to hold the GSE accredition. I was extremely happy and delighted to be able to get a huge load off my chest.

NOTES UsedFor anyone who is interested in my work experience, I had about near to 8 years experience and only had experience in SOC environments.

The lab exam is not hard. It is designed in a way that anyone can complete the lab, but it is just a matter of how long it will take to finish it. The GSE labs expect the candidates to know the domain knowledge well enough to be able to complete it within a very limited allocated time. If you are looking at the GIAC Course Materials and found that you can be more efficient in every area than what the course materials suggested, then you are very likely to be ready for GSE. Based on the List of GSE Professional list and the total number of candidates that I recall during my lab exam, only 8 out of 20 candidates that went for the lab passed. ]]>
SANS™ Institute GIAC Certifications LionelTeo
Patten University - and how it compares against others (in my opinion). Sun, 27 May 2018 14:24:21 GMT For the record, I am a former WGU student that dropped the program. It got me a lot of tech certs and transfer credits, and a student loan bill. ... For the record, I am a former WGU student that dropped the program. It got me a lot of tech certs and transfer credits, and a student loan bill. That's all I can really say about that. It wasn't a good experience overall - it was to start, but not later.

In 2015 I decided to switch schools and try to transfer credits. I tried UMUC (University of Maryland University College), CSU Global Campus, Florida Tech Online, and Penn State World Campus.

UMUC had a horrible enrollment experience - delays in processing transcript, issues with the transcript from WGU where class outcomes were misrepresented (calling classes "transfer" when I actually took and passed them, for example), and of course they used PeopleSoft which is an unintuitive online web experience.

CSU Global uses PayPal for credit card processing. PayPal doesn't take cards without a PayPal account, which I don't and won't ever again have due to them blocking accounts for arbitrary reasons. CSU waived the fee and negated the need to provide a card, but then they do a credit check (?) and require docs for certain things. Problem: Stafford loans under the rules are not credit based, they're needs based, and them running credit is improper (I worked in the industry). PLUS loans are credit based, but I didn't want or need PLUS loans. So I withdrew the app.

Florida Tech Online has a very archaic enrollment. You can't do hardly anything online, you have to email answers to questions, then do a call, then do more emailing...just didn't work for me.

Penn State World Campus didn't do anything specifically wrong, but their requirements weren't really clear. It isn't self paced, you have to have a webcam and headset to participate in actual scheduled classes, which I wasn't interested in as I work sometimes more than 40 hours a week and some weekends, and I needed ultimate flexibility. So I withdrew.

Fast forward and I stumble on Patten University. They've had a tough run of it. Started as a faith-based nonprofit, got bought out, went for profit, lost accreditation due to scummy practices, got bought out again, regained accreditation after probation and now here we are. They don't do FFELP at all, it's all out of pocket if you don't have tuition reimbursement (which I don't).

Patten is self paced, and has some basic "activity" requirements. You have to communicate with your advisor and/or the course advisor if/when they reach out but it's less about progress and more about making sure you have what you need. You have to submit the assignments. You have to do the tests. Normal stuff. But so far two things impressed me: first, they took my WGU credits and basically they were enough for nearly all the GE courses - even courses I didn't complete with WGU were given credit, unlike the other four above that didn't credit those courses. Second, you can do the entire enrollment yourself with no interaction whatsoever with anyone. I was able to start right away without ever talking to anyone.

Now, Patten does not do financial aid; you have to pay out of pocket, which for me isn't a problem, but for someone who's unemployed or lower income (I'd say, under $12/hour if you're single and live alone, $8/hour if you don't have a living expense) is likely an issue. Still self paced, so if you complete the program in 4 months, that $1500 or whatever is all you pay. It's significantly cheaper than other for-profit schools because they don't need to do the FFELP and their web experience saves on enrollment advisor time investment. There's also no college email address (which you do get with the above ones including WGU, which I still have), so you have to log in to reply to advisors.

Courses for Patten are mostly some written extracts from textbooks, links to the textbook library (no extra charge for that), linked external written material, or linked external videos (mostly YouTube). Some ask that you post on a discussion board either solo or in reply to other posts. There are also some flashcard "mastery" parts that are helpful for trying to remember terms. Other than that it's a very similar format to WGU - a pre-exam that tells you what to study in preparation for the final exam, proctored exams, etc.

Now, unlike WGU, every course (as far as I can tell) requires a minimum of three essays, usually on Unit 2, 4 and 6, usually 2-4 pages, and they're graded by the instructor. Most of mine get graded a day later, but they have up to 7 days to grade them and provide response. Between the essays, the exams, and the grading, Patten uses an actual letter score system for courses, rather than WGU's Pass/Fail outcome system. This means more credibility in terms of the quality of the work done and transcripts, but it also means things may take a lot longer especially if you have to use APA standards, but most of my essays are straight out of my head and I don't need to cite anything. But essays take a while to research, write, proofread and publish properly especially if it's material that's new to you.

I'll continue providing updates, but so far, Patten (for me) is a generally consistent experience that's still close to the college experience, without the hard limitations. But it probably won't work at all for those who aren't currently working or bringing in income and certainly won't work if you don't like/aren't good at writing essays. ]]>
IT Jobs / Degrees revelated
Passed eJPT Sat, 26 May 2018 16:49:39 GMT Hey Guys: Just submitted my exam for the eJPT and I passed! :) My question is to anyone who purchased the Elite package for PTSv3, it says it... Hey Guys:

Just submitted my exam for the eJPT and I passed! :)

My question is to anyone who purchased the Elite package for PTSv3, it says it comes with a physical certificate (not digital) on the high quality paper. Did they email you after passing with address info or do they just ship it out without any communication and just use the address they have on file? Thanks. If anyone has questions about the eJPT exam (no exam specific answers) I will provide any insight I can. Thanks! ]]>
General Certification kMastaFlash