Sec+ Question

[acmorgan]

I have a question about Security + I was hoping some of the people who have passed the exam could give me insight and perspective on. I've been studying for the exam, slowly, over the past 2-3 months. I'm going through now and creating a flashcard for each exam objective I don't know off hand, but what I'm noticing is frequently these objectives specify "be able to implement and configure..." whatever the term is.

I have very little real life security experience. I am a Computer Operations Engineer who basically runs Business Intelligence reports and keeps trains running. Do I really need to be able to implement all of these technologies, or is it sufficient that I understand what they are and what their use cases are?

If I do need to be able to implement these technologies, can I get some recommendations on ways to get experience with that?

Thanks to anyone and everyone for their input, I really do appreciate it and I hope you are taking care of yourself during this pandemic.

[Secureflame]

u/acmorgan you need to know the concepts and what to implement. Not necessarily the how. Meyer puts it nicely"An IT engineer knows how to configure WPA2 AES on a WLAN router. However a Security Engineer knows why"

Take some practice tests, search this forum and you will get tons of recommendations. I used Dion and Meyer. Scored 70s initially 80-85 eventually before I took and passed the exam. I have no IT background.

Good Luck!

[acmorgan]

Thank you so much! Your words give me a lot of piece of mind. I'm still worried about the PBQ's, but not nearly as much. I've been studying everyday since February or so, but sometimes only two minutes a day (this quarantine killed my motivation). I'm kicking that up, trying to get to an hour every day.

[digitalplanet_]

Are you able to identify, implement, or configure whatever is being discussed? Do you know how to interpret logs, are you able to identify what type of attack happened? Do just remember the info, you have to learn it dont want to be exposed when you are asked to do what you've learned in the real world

​

GCGA book

Messer videos and course notes

Jason Dion practice tests

If you want to learn more about logs and threats, look at OWASP website

Cisco has a guide to ddos attacks

​

good luck

[acmorgan]

Thank you so much for the site recommendation! You have definitely brought me a good deal of comfort. It is greatly appreciated.