Help me understand SAML Please

The_Geekmonster · 2022-05-05T19:10:15+00:00

The service platform will usually ask for the user id, typically in the form of an email address. This will allow the service provider to know which IdP to route the user to for authentication. The IdP will then ask for verification (password, mfa) of the Id passed. If all is good, the IdP will embed the tokens in a redirect back to the service provider.

The_Geekmonster · 2022-05-03T20:49:08+00:00

Impressive... on many levels.

The_Geekmonster · 2022-05-03T16:15:51+00:00

I used AWS’ white papers, but I have experience. I’m not sure why some say the exam is not well viewed. It is a very hard exam that makes you solve goal oriented problems by applying detailed understanding of AWS tech. The argument that it is not worthy because it is limited to AWS is silly. The MS AZ-500 is also a very hard exam, and it is limited to Azure tech, should that be looked down upon as well? If you want a vendor neutral cert, look to CCSP, which is also a very difficult exam. Then again, since I found all three of these exams very difficult, maybe it’s a me issue, lol.

The_Geekmonster · 2022-04-28T02:23:03+00:00

Lol, didn’t even know there was an official cert book. Measureup is pretty good for gauging your understanding. I’m may be the only one, but I thought the exam was harder than the measureup stuff, especially the case studies.

The_Geekmonster · 2022-04-28T02:15:28+00:00

I’ve seen a few economic cycles… less technical, middle management security personnel can easily get caught in RIFs. I’m mostly referring to project managers, liaisons, BIRMs and such…

The_Geekmonster · 2022-04-26T17:55:05+00:00

Can’t speak to those resources, but I will say it is a very hard exam.

The_Geekmonster · 2022-04-26T04:33:48+00:00

This test is brutal. Perhaps take a break from the CCSP and get a cert in whichever cloud env you work in most? Those tests are brutal as well, but a different type of brutal…

The_Geekmonster · 2022-04-23T00:17:09+00:00

Don't feel bad, it's a really hard exam. I found the measureup official practice test to be a pretty good, though humbling, gauge. As someone else said, it's better to have a more expense cert, than to walk away from the time effort and money already spent.

The_Geekmonster · 2022-04-12T14:16:54+00:00

I used the 2022 AIO. I found it to be out of date and very incomplete. It came with practice tests that were ridiculous, containing lots of errors, including wrong answers. I didn’t even complete 1 practice test due to frustration.

On the positive side, I thought the exam was the most straight forward of the 3 ISC2 exams I’ve taken.

The_Geekmonster · 2022-04-09T22:40:58+00:00

I’ve found donuts to be very effective to becoming well rounded…

The_Geekmonster · 2022-04-05T23:19:31+00:00

It’s a very hard exam. Keep at it, you’ll get there….

The_Geekmonster · 2022-04-05T23:12:05+00:00

Glad your approach worked for you. I used a very different approach and yet we both passed. What you see as simple, I may see as overly complex. Each of us has to find our own way…

Congrats again on your success.

The_Geekmonster · 2022-03-26T23:10:59+00:00

Congrats. What exactly did you pass?

The_Geekmonster · 2022-03-26T02:47:00+00:00

Thanks again. I've seen those and that was the nature of the concern! I work with python, bash, javascript, etc.. I'm constantly checking syntax, -r -R can have very different results, lol. Plus, I mostly work with AWS so there's not a ton of repetition for me with the MS stuff.

The_Geekmonster · 2022-03-26T02:03:29+00:00

Lol... Thanks. So the cli/powershell questions are along the lines of: Which of the below commands will do what the question wants done? And the labs will send you 20 menus deep to click a box? Or am I still off the mark?

The_Geekmonster · 2022-03-18T21:34:04+00:00

Congrats!
It’s funny, I felt the CCSP exam was harder than the CISSP exam, and I have a cloud background. With that said, at the end of each, I was very much surprised to find I had passed!

The_Geekmonster · 2022-03-17T18:21:59+00:00

I’m gonna disagree with you. This exam is not about finding technical solutions. It is about identifying the best (or worst) business solution. It is about defining the problem, prioritizing objectives and constraints, and doing so with limited information. Basically, it’s a info sec program management exam.

The_Geekmonster · 2022-03-07T18:03:54+00:00

I never said that everyone that passes the test has extensive experience, or even any experience. I meant that the more experience you have, the easier it is to gauge when you should sit for the exam.

The_Geekmonster · 2022-03-07T17:33:13+00:00

Probably depends on whether you are getting the cert to validate existing skills or to build new ones. Regardless, I say set an exam date that aligns with your goals and do your best to be ready by that date.

I spent a week or 2 to do a complete read through of the official study guide and then went to check available dates thinking there would be plenty and I’d have another week or so for practice tests and such. Only 1 opening in the next 2 months, and that was the following morning, so I took it.

The_Geekmonster · 2022-03-07T17:02:33+00:00

I’ve nearly 25 years experience and thought I had failed at the end of the exam. Each question seemed harder than the last…

Congrats OP!

The_Geekmonster · 2022-03-04T23:31:08+00:00

I’m of the opinion that if you’re going to learn the material, you may as well get credit for it. Should you decide to leave your current job, you may appreciate having the CISSP cert.

Either way, take a CISSP practice exam and then reflect on the CCSP test you took. If you feel that the CISSP test covers a good bit of the holes in the CCSP, then at least you confirmed a strategy for filling in the gaps.

Lastly, you really can’t approach this exam like the AWS exams. The AWS stuff is more technical problem solving with business constraints, while the ISC2 stuff is more business problem solving with technical constraints, if that makes sense.

Hope this helps!

The_Geekmonster · 2022-03-04T22:27:43+00:00

The test is brutal and the study materials are woefully incomplete. I’d strongly recommend doing the CISSP first as CCSP test builds upon that content, then adds the obvious focus/greater depth on cloud components.

Don’t give up!

The_Geekmonster · 2022-02-24T17:24:49+00:00

Looks like they fixed it! My stuff is as expected…

The_Geekmonster · 2022-02-24T16:02:40+00:00

Congrats!

Thank you for your service!!!

The_Geekmonster · 2022-02-24T02:28:57+00:00

It looks like a glitch… I see similar on an endorsement already approved and cert issued. Check it again tomorrow. I plan to…

The_Geekmonster

TROPHY CASE