We use the certification tag for questions about programs designed to vouch for an individual's competence in security-related work. Use the "compliance" tag for programs like PCI-DSS that assess the security of a server.
18
votes
5answers
2k views
Professional certifications for IT Security
Which credentials of the sub-list of IT certifications (as per the Information Systems Security Association) would be considered MUST HAVE for a IT Security specialist.
Information Security
CEH ...
17
votes
6answers
3k views
Good (preferably free) resource for CISSP practice questions
I'm looking to sit for my exam in a few weeks, and I want to have a good set of practice tests to bounce against and make sure that I'm up to par with the types of questions that will be asked.
4
votes
4answers
1k views
CEH or GIAC - Which one should I pursue?
After a lot of Google and forum searches, I found out CISSP is one of the few valuable certs. Unfortunately, I only have 2 years of experience and don't have any specific experience in security ...
11
votes
6answers
3k views
How useful is CISSP to a recent graduate?
I am a recent graduate and would like to move into the IT Security field. My degree was just straight CS with no particular security focus.
I have recently acquired a copy of a CISSP study guide and ...
2
votes
3answers
699 views
GSEC or GCIH, for a Security Analyst?
I've been with this confusion of getting a certification for a long time!! With the aim of becoming a Security Analyst/Tester, and for a good kick start, which one of these two is good?
GSEC or GHIC??
...
6
votes
2answers
324 views
International pentester certification
I've looked at the questions regarding certifications on this site and they are essentially asking what to go for.
I hope that my question is distinct enough that is is not considered a dupe.
I ...
11
votes
7answers
6k views
Comparing online security courses: eLearnSecurity vs. Offensive-Security
I'm a web programmer, using the Linux environment for 2 years.(I have experience with Web app hacks +Web app security techniques)
I want to start studying security in-depth, but I have limited time ...
6
votes
1answer
986 views
SANS training - worth it?
I am a programmer, doing mostly web development now, dealing also with securing the web applications in my line of work. I have reasonable knowledge of security matters, though not always staying ...
5
votes
1answer
161 views
What compliance problem does “Common Criteria Certification” solve?
It has been said Common Criteria solves a "Compliance problem, and not a security problem". Can someone explain where CC certification is required or benefits an industry?
Is it simply a marketing ...
3
votes
4answers
982 views
What are the basic certification course for beginners?
I am an application developer in MNC with 2 year experience. What are the basic certification or course should I do what can help myself to shift in security field?
3
votes
3answers
331 views
would preparing for CCNA add “significantly” to my knowledge as a penetration tester?
I'm a post graduate student and self taught programmer. I concentrated on Computer Networks & Operating Systems more during my undergraduate studies. I can explain usually used protocols by ...
3
votes
4answers
331 views
Can you pass C|EH without any hands-on experience in hacking tools
I've been in the IT security industry for well almost a year now since I graduated last year and I'm currently thinking about taking up C|EH examination. I've glanced through several prep and review ...
2
votes
4answers
489 views
Web Security Certifications
I'm looking for a certification for Web Application Security and Web Pen Testing. Via Google I found the following two:
Certified Web Application Tester
GIAC Web Application Penetration Tester
How ...
1
vote
2answers
364 views
Coverage of OSCP training
Is there any part related to penetration that OSCP/OSCE fail to cover in their training programs?
How much will I be exposed to penetration techniques after completing OSCP/OSCE?
