RE: Security Certifications. Help needed

[Meidinger Chris <chris.meidinger () badenit de>]

I studied for the MCSE with primarily books and brain dumps. search 'brain
dump 70-XXX' for your exam number on google and you will find them. They are
the exam questions, but they are very important so that you have a feeling
for the questions that will be asked. For example, there really are
questions on the microsoft exams like 'which checkbox is on top in the
window, A or B' which are really nice to have seen beforehand.

badenIT GmbH
System Support
 
Chris Meidinger
Tullastrasse 70
79108 Freiburg


-----Original Message-----
From: Louie [mailto:tech.louie () verizon net]
Sent: Friday, August 15, 2003 6:17 AM
To: salgak () speakeasy net; Mix; security-basics () securityfocus com
Subject: RE: Security Certifications. Help needed


Hey Mix,

Well myself I'm about to start my MCSE
courses. What good sites do you
recommend for me to learn?

Plus do you have any free tutorials or
material that your will to part with?

I also would like to get into security,
so any good site that I should read let
me...The 2 things that I'm most
interested is

1. Intrusion Detection
2. Vulnerability Assessment/Penetration
Testing

So any good sites let me know.


Louie


-----Original Message-----
From: salgak () speakeasy net
[mailto:salgak () speakeasy net]
Sent: Thursday, August 14, 2003 10:53 AM
To: Mix;
security-basics () securityfocus com
Subject: Re: Security Certifications.
Help needed

> -----Original Message-----
> From: Mix
[mailto:Silver_ptps () hotmail com]
> Sent: Thursday, August 14, 2003 01:22
PM
> To: security-basics () securityfocus com
> Subject: Security Certifications. Help
needed

> Hi all.
>
> I am a security specialist wannabee, i
have an MCSE on NT4 platform and a
> MCP in windows 2000 and i am currently
studying to become a CCNA and
> Security + certified Profeessional.
>
> Where should i go from here? can you
point out some other certifications
> around available that should help me
in this IT Security area?

First. . . you need broader OS
experience.  Win2K and some flavor of
UNIX/Linux.  Preferably multiple
flavors.   You can NEVER learn enough
UNIX in computing. . .

Then the question becomes, what PART of
security do you want to do ?  Policies ?
Firewalls ? VPNs? Intrusion Detection ?
Forensics ?  Vulnerability
Assessment/Penetration Testing ?

Security isn't a monolithic area.

Eventually, get a GIAC or a CISSP.  The
GIAC credential is, IMHO, the better
one, but the CISSP is better known.  So
people ask for it, just like they ask
for MCSEs (most amusingly, I saw an ad
for a Solaris Administrator, no mention
of Windows systems. . .but MCSE was
required.)

Learn a few open-source apps.  SNORT and
TRIPWIRE come in handy.  Use PUTTY on
your Windows boxes, and let your users
use them instead of Telnet and FTP. . .





----------------------------------------
-----------------------------------
----------------------------------------
------------------------------------


---------------------------------------------------------------------------
----------------------------------------------------------------------------

---------------------------------------------------------------------------
----------------------------------------------------------------------------