We use the certification tag for questions about programs designed to vouch for an individual's competence in security-related work. Use the "compliance" tag for programs like PCI-DSS that assess the security of a server.

learn more… | top users | synonyms

25
votes
5answers
3k views

Professional certifications for IT Security

Which credentials of the sub-list of IT certifications (as per the Information Systems Security Association) would be considered MUST HAVE for a IT Security specialist. Information Security CEH ...
22
votes
10answers
10k views

Good (preferably free) resource for CISSP practice questions

I'm looking to sit for my exam in a few weeks, and I want to have a good set of practice tests to bounce against and make sure that I'm up to par with the types of questions that will be asked.
5
votes
4answers
4k views

CEH or GIAC - Which one should I pursue?

After a lot of Google and forum searches, I found out CISSP is one of the few valuable certs. Unfortunately, I only have 2 years of experience and don't have any specific experience in security ...
12
votes
7answers
7k views

How useful is CISSP to a recent graduate?

I am a recent graduate and would like to move into the IT Security field. My degree was just straight CS with no particular security focus. I have recently acquired a copy of a CISSP study guide and ...
2
votes
3answers
2k views

GSEC or GCIH, for a Security Analyst?

I've been with this confusion of getting a certification for a long time!! With the aim of becoming a Security Analyst/Tester, and for a good kick start, which one of these two is good? GSEC or GHIC?? ...
6
votes
2answers
500 views

International pentester certification

I've looked at the questions regarding certifications on this site and they are essentially asking what to go for. I hope that my question is distinct enough that is is not considered a dupe. I ...
17
votes
7answers
11k views

Comparing online security courses: eLearnSecurity vs. Offensive-Security

I'm a web programmer, using the Linux environment for 2 years.(I have experience with Web app hacks +Web app security techniques) I want to start studying security in-depth, but I have limited time ...
7
votes
1answer
3k views

SANS training - worth it?

I am a programmer, doing mostly web development now, dealing also with securing the web applications in my line of work. I have reasonable knowledge of security matters, though not always staying ...
5
votes
1answer
233 views

What compliance problem does “Common Criteria Certification” solve?

It has been said Common Criteria solves a "Compliance problem, and not a security problem". Can someone explain where CC certification is required or benefits an industry? Is it simply a marketing ...
4
votes
4answers
437 views

Can you pass C|EH without any hands-on experience in hacking tools

I've been in the IT security industry for well almost a year now since I graduated last year and I'm currently thinking about taking up C|EH examination. I've glanced through several prep and review ...
4
votes
4answers
4k views

What are the basic certification course for beginners?

I am an application developer in MNC with 2 year experience. What are the basic certification or course should I do what can help myself to shift in security field?
3
votes
3answers
499 views

would preparing for CCNA add “significantly” to my knowledge as a penetration tester?

I'm a post graduate student and self taught programmer. I concentrated on Computer Networks & Operating Systems more during my undergraduate studies. I can explain usually used protocols by ...
2
votes
2answers
747 views

Coverage of OSCP training

Is there any part related to penetration that OSCP/OSCE fail to cover in their training programs? How much will I be exposed to penetration techniques after completing OSCP/OSCE?
2
votes
4answers
1k views

Web Security Certifications

I'm looking for a certification for Web Application Security and Web Pen Testing. Via Google I found the following two: Certified Web Application Tester GIAC Web Application Penetration Tester How ...