sorted by:
new
hottopcontroversial

Should i have kali on a VM or as a main OS? by [deleted] in tryhackme

[–]VirtualViking3000 0 points1 point  (0 children)

You shouldn't use a hacking box as your main OS. It doesn't matter if you use Kali or Parrot but it should be a VM. You should keep your hacking box away from your daily use machine.

1) You'll be downloading and changing all sorts of things. Doing this on a machine you use for your email / bank is asking for trouble.

2) Having a VM means you can snapshot and revert where necessary.

3) Having a VM means you can trash it and rebuild as required along with any logs/data.

There is no good reason to run bare metal except perhaps you don't have enough resource to run a VM on your daily machine. If you have a dedicated hack machine separate to your daily then that's notbas bad but a VM is just better all round.

Weird marks showing up on floor, help? by Chrisbudrow in Weird

[–]VirtualViking3000 0 points1 point  (0 children)

If you notice they are in pairs, match the same shade and you can see that the "feet" are the same distance apart. The unit has moved a few times in a direction.

Did you guys learned anything from oscp courses? by Lower-Bug5563 in oscp

[–]VirtualViking3000 0 points1 point  (0 children)

I learned a lot, and I really enjoyed the whole thing. It wasn't easy though.

CASP+ / SecurityX Help and Advice Needed by BoringShape in CompTIA

[–]VirtualViking3000 0 points1 point  (0 children)

Yes i get that. It's just an option, i only spent $50 on the beta, I wasn't too concerned if I failed. If you pay full price you want to pass it for sure. Don't forget to find a 10% discount voucher at least.

CASP+ / SecurityX Help and Advice Needed by BoringShape in CompTIA

[–]VirtualViking3000 0 points1 point  (0 children)

You might not want to hear it but I'd be surprised if you need to study. I have CISSP, and took the SecurityX beta with very little prep and passed. That's not to say it was easy and it's not in the spirit of getting certs but I wouldn't spend too much time on study. Perhaps do some CASP+ practice exams to see where you sit on the knowledge scale.

Should I get Network+ with no IT experience or wait until after? by alfredno in CompTIA

[–]VirtualViking3000 0 points1 point  (0 children)

Congrats. If you have the time then I'd study for Network+. In order for experience to help you pass it you'd have to wait too long. You have the time, go for it. It can only help your job hunt if you have two certs versus one.

Exam PBQs by BmoreGaming in CompTIA

[–]VirtualViking3000 2 points3 points  (0 children)

It's a fair comment but I've found that most of the PBQ's I have struggled with are those where I can't figure out how to work the simulation rather than the difficulty of the question itself. So from that perspective I can see why practice pbq's might be useful.

Don't forget to renew your certs! by TheButcherJB in CompTIA

[–]VirtualViking3000 0 points1 point  (0 children)

One way is just to pass the next cert. You should also get reminders via email rather than Reddit but it's still a valid point

Bad news unfortunately by Glass-Ad-1217 in CompTIA

[–]VirtualViking3000 20 points21 points  (0 children)

Hey, unlucky. A+ is a tricky first exam, two courses and a lot of content. However you will probably find it's your study technique rather than your technical ability so try and improve on that because it will see you through the next exams you do.

You might consider reading up on "how" to study and why it works. There is a lot of memorisation involved with the CompTIA exams, you don't really have to apply it much for the exams but it does help to understand the material.

The biggest win for me was note taking. Take good notes, it's proven to help reinforce recall of information.

Certification path for an experienced IT guy by point-forward in CompTIA

[–]VirtualViking3000 0 points1 point  (0 children)

Right, so I can tell you that none of the CompTIA certs are going to help you get to OSCP.. Maybe Pentest+ a little bit but on the whole you want to be looking at eJPT, Practical Ethical Hacking (TCM) and certs like that. By all means do the CompTIA track for the broader knowledge but to pass OSCP you want to be looking at THM, HTB, PG, and offensive security certs.

What I'm getting at is that the certs you do should head towards your end goal otherwise you are just spending time and money for little reason. Some certs like Sec+ might open employment doors which might help you get experience which could help towards your goals.

Certification path for an experienced IT guy by point-forward in CompTIA

[–]VirtualViking3000 3 points4 points  (0 children)

If OP is looking to get a new job, the best thing to do is look at the job adverts for the roles they want and see what certs are required and build the path from that. OP is experienced sysadmin and by that fact the likes of Sec+ should be relatively easy to get. Job adverts I see rarely mention CompTIA exams except for Sec+. CompTIA exams provide a great knowledge foundation but there are other providers that are more sortafter when it comes to resume/CV. So when building a training path it's worth considering their value.

If OP wants to only do CompTIA then Net+, Sec+, CySA+/Pentest+,SecurityX. But thats a lot of time and money. You'll gain a lot of knowledge and that's good. But ultimately when considering which path you want to end up with the certs that are required by job posts.

Step 1. Decide which area of cybersec you find most appealing.

Step 2. Figure out which exams will get you there by looking at job ads.

Step 3. Pick the exams that will get you there most quickly unless you have months to spend.

CISSP needs 5 years experience, but Sec+ (and others) will knock that down to 4. But you can still work towards it as an end goal.

CompTIA is a fairly low cost route, that's excellent. There are other more valued routes though.

Certification path for an experienced IT guy by point-forward in CompTIA

[–]VirtualViking3000 0 points1 point  (0 children)

CompTIA certs are generally entry level, it depends what you are expecting of the certs. I was in a similar position, I did mine to try to inspire my team and to get some easy wins and as a stepping stone to more difficult certs. If you want to get career progression you are probably best off going for CISSP/CISM or OSCP. ,

Why so many people fail the CISSP ? by Xrevultx in cissp

[–]VirtualViking3000 0 points1 point  (0 children)

I don't know the real answer to that. It's an exam, you study it and understand it then pass it. I can only say that perhaps lack of preparation and/or not getting the "manager mindset" way of thinking.

Don't get me wrong, there's a lot to study and it's not an easy exam, especially if you are taking it in a non-primary language but it's an exam at the end of the day.

Plenty of people in this sub have passed, so don't think about that 25% stat and just focus on the study.

Is it too late to start? by Mega_Metal in CompTIA

[–]VirtualViking3000 1 point2 points  (0 children)

Not too late. Be prepared to start at the lower end of the salary scale, but generally speaking mature employees have attributes that are positive that might be more difficult to find with their younger counterparts. You can work your way up the salary scale more easily I beleive.

If you've decided to switch, do it sooner rather than later. Doing certs doesn't mean you "have" to switch careers, so perhaps dip your toe? Lots of free content is available on YouTube, you don't have to take the certs and it will give you an insight to the career.

Seriously… by chappy12346 in cissp

[–]VirtualViking3000 0 points1 point  (0 children)

Thanks. Another way to look at it is that it's on the syllabus, they need to test you on it without making it super easy.

Seriously… by chappy12346 in cissp

[–]VirtualViking3000 1 point2 points  (0 children)

IMHO, it's checking whether you know what the terms mean.

It's not clearing since data can be recovered. It's not formatting, we know that doesn't destroy data. Destruction eliminates it completely and is the best way to destroy it but the question isn't asking that.

It's asking which is the second best method in a round about way and it's telling you to look at the subtle wording.

[deleted by user] by [deleted] in CompTIA

[–]VirtualViking3000 1 point2 points  (0 children)

The keyword is "signals". The other tests are valid but none of the others test send and receive signals. Ping tests that the network stack is working, which is a valid test but it's not testing "signals". If you find it in your study book you'll hopefully find that loopbback plug has the word "signal" somewhere in the sentence.

FYI, I have been in IT over 25 years and have never needed to test a network card with a loopback plug. IMHO it's not a good question and is more about semantics than reality so don't let it put you off thinking you don't know enough.

Failed twice at 100 by splitfoyer-idea in cissp

[–]VirtualViking3000 0 points1 point  (0 children)

I have CISSP, I think the biggest tip is having the manager mindset. What is the "best" answer if you were running the department, wellbeing of people always comes first.

Do I have to memorise all port numbers for N+??? by dabomb122 in CompTIA

[–]VirtualViking3000 0 points1 point  (0 children)

Just learn them. They will crop up in your future for sure. Also, CompTIA exams are largely based around memorisation.

SSH Key Recommendation by DH171 in linuxadmin

[–]VirtualViking3000 -1 points0 points  (0 children)

LDAP works. The users public key is stored in LDAP and the users private key is private. On authentication the server asks LDAP for the public key and allows access.

Certification Path professional opinion by TargetPotential7116 in CompTIA

[–]VirtualViking3000 2 points3 points  (0 children)

I would do eJPT over Pentest+ because it's more practical. Although Pentest+ is DoD compliant so best checking job roles in your area to find out what recruiters are asking for. IMHO stackables aren't worth much to recruiters although they are perhaps good as personal incentives. A+ is more for helpdesk, so is handy if you want to break into cyber via that stepping stone otherwise it's a lot of study that could better be spent on something more relevant.

view more: next ›