{"id":1241,"date":"2020-04-01T08:00:33","date_gmt":"2020-04-01T08:00:33","guid":{"rendered":"http:\/\/thinqtanklearning.com\/blog\/?p=1241"},"modified":"2020-04-01T13:54:31","modified_gmt":"2020-04-01T13:54:31","slug":"the-value-of-security-certification","status":"publish","type":"post","link":"https:\/\/thinqtanklearning.com\/blog\/the-value-of-security-certification\/","title":{"rendered":"The Value Of Security+ Certification"},"content":{"rendered":"

\"\"<\/a><\/p>\n

Over the last decade or so, IT security has exploded as a field, both in terms of the complexity and breadth of the subject matter, and the opportunities available to security-focused IT professionals. Security has become an inherent part of everything in IT, from network management to web, application and database development. But even with the increased focus on security, there is still much work to be done in the field, and opportunities for security-minded IT professionals aren\u2019t likely to decrease any time soon.<\/p>\n

\"\"<\/a><\/p>\n

For those who are already in the IT security field, or are looking to enhance their career, there is a range of\u00a0certifications and training options available for those who want to learn about IT security and demonstrate that knowledge to current and potential employers. However, a lot of the more advanced IT security certifications require a level of knowledge, experience, and commitment that might be outside of the range of many newer IT professionals.<\/p>\n

A great certification to demonstrate basic security knowledge is the CompTIA Security+ certification<\/strong><\/a>. Unlike other certifications, such as the\u00a0CISSP\u00a0or the CISM, the Security+ doesn\u2019t have any mandatory experience or prerequisites, though CompTIA does recommend that candidates have at least two years of experience with networking in general\u00a0and security in particular. CompTIA also suggests that Security+ candidates obtain the CompTIA Network+ certification, but they don\u2019t require it.<\/p>\n

\"\"<\/a><\/p>\n

Even though the Security+<\/strong><\/a> is more of an entry-level certification than others, it\u2019s still a valuable certification in its own right. In fact, the Security+ is a mandated certification for the US Department of Defense\u00a0and is accredited by both the American National Standard Institute (ANSI) and the International Organization for Standardization (ISO). Another benefit of the Security+<\/strong><\/a> is that it\u2019s vendor-neutral, instead choosing to focus on security topics and technologies in general, without limiting its focus to any one vendor and their approach.<\/p>\n

\"\"<\/a><\/p>\n

The Security+<\/strong><\/a> is basically a generalist certification \u2013 meaning that it evaluates a candidate\u2019s knowledge across a range of knowledge domains, as opposed to focusing on any one area of IT. So, instead of maintaining a focus on application security only, say, the questions on the Security+ will cover a broader range of topics, aligned according to the six primary knowledge domain defined by CompTIA (the percentages next to each indicate the representation of that domain on the exam):<\/p>\n

\u2022 Network Security (21%)
\n\u2022 Compliance and operational security (18%)
\n\u2022 Threats and vulnerabilities (21%)
\n\u2022 Application, Data, and Host Security (16%)
\n\u2022 Access control and identity management (13%)
\n\u2022 Cryptography (11%)<\/p>\n

The exam provides questions from all of the domains above, although it is somewhat weighted to give more emphasis on some areas. For example, you can expect more questions on network security as opposed to cryptography, for example. That said, you shouldn\u2019t necessarily focus your studying on any one area, especially if it leads you to exclude any of the others. A good, broad knowledge of all the domains listed above remains the best way to be prepared for the test.<\/p>\n

\"\"<\/a><\/p>\n

There is only one exam required to earn the Security+ certification<\/strong><\/a>. That exam (exam SY0-301) is comprised of 100 questions and is provided over a 90-minute period. The grading scale is from 100 to 900, with a passing score of 750, or roughly 83% (although that\u2019s just an estimate\u00a0because the scale changes somewhat over time).<\/p>\n

\"\"<\/a><\/p>\n

\"\"<\/a><\/p>\n

In addition to the Security+<\/strong><\/a>, CompTIA offers a more advanced certification, the CompTIA Advanced Security Practitioner (CASP), providing a progressive certification path for those who want to continue their security career and studies. Like the Security+, the CASP covers security knowledge across a number of knowledge domains, but the depth and complexity of the questions asked on the CASP exam exceed those of the Security+.\u200b<\/p>\n

CompTIA also offers numerous\u00a0certifications\u00a0in other areas of IT as well, including\u00a0networking, project management and systems administration. And, if security is your chosen field, you might consider other certifications such as the CISSP, CEH, or a vendor-based certification such as the Cisco CCNA Security\u00a0or Check Point Certified Security Administrator (CCSA), to extend and deepen your knowledge of security.<\/p>\n

thinQtank\u00ae\u00a0Learning<\/strong><\/a> offers training and\u00a0 certification courses in many areas of expertise. If you have any questions about our\u00a0Training and Certification Programs<\/a><\/strong>, we would love to hear from you! Give us a call at 855-TO-THINQ (855-868-4467) or email\u00a0\u00a0website@thinqtanklearning.com.<\/a><\/strong><\/p>\n

\"\"<\/a><\/p>\n

\"\"<\/a><\/p>\n