-
Practice Tests vs Actual
I was hoping to compare my experience with everyone else's to get a better gauge on things. Overall, do you think your scores/performance on the practice tests were higher or lower than the final/certification test?
-
GCIA Passed. Fun course!
Passed the exam last week. This was my third workstudy. Hopefully next year I can get my job to pony up the dough so I can fully concentrate on the course... Although, work study is a great place to make some new friends. A great place to grab some material to study in preparation (reading hex **** of packets):…
-
SANS Singapore October 2016
As per above, anyone attending the convention ? If yes, what courses ? https://www.sans.org/event/sos-sans-october-singapore-2016
-
What's better the GPEN or the OSCP?
I was wondering which has more value, the OSCP is highly respected and a lot cheaper than a SANS course, how does the material covered in the GPEN compare to the OSCP?
-
Passed GCIH
Took 504 in May with Bryce Galbraith. Very good instructor btw. Scheduled my exam for August 1st. I spent 1 week per book, carefully reading through and indexing. Ended up with about 500 entries in my index. I took the first practice and scored a 80%. On the second practice, I scored a 78%, which was discouraging. On test…
-
GREM Passed - 3 SANS Classes/Certs in 1 year
Today I took the GREM exam, and passed with 92%. This caps off a monster year of training and testing that has been extremely rewarding, if exhausting. I'm writing this post because I learned alot about how to prepare for a SANS exam over this year, and hopefully some folks thinking about attempting a GIAC cert will be…
-
Prepping to take the GWEB class/exam - Studying tips
Good afternoon everyone, I'm hoping that people here can help me find where I'm lacking on my certification exam prep. Over the past few years I've been privileged to take the GCIA, GWAPT and GCIH exams, but with no certifications to show for them. I will admit that the GCIA and GWAPT exams were 'hurried' upon me. There…
-
GCIH on Monday
I have my GCIH exam booked for this coming Monday. We spend 4 full days creating my first index - basically about 35 hours - reading the books and adding to my xls. After that it was about 20 pages and 800 lines. At the end of the 4 days i took the first pactise exam. Was happy with the 79% but thought i should have done…
-
Any GWAPT Practice Exams?
Hello, I have the GWAPT cert attempt in a couple of days and I'm wondering if anyone has a practice exam available? If not, do you have any advice on what to expect? :D :D
-
Feedback on GCWN
Has anyone taken the most recent rendition of the GCWN? I'm becoming more and more interested in taking this class / cert, especially with the focus on PowerShell and some of the new security features that are coming out with Windows Server 2016. Any feedback at all is greatly appreciated! Looking to sign up before EOY via…
-
Dev 522 v 542 (GWAPT)
Dear all, Has anyone encountered either of the above 2 courses? Would really appreciate it if anyone can shed some light as to what the main differences between the two are. Work as an architect/security assessor against web applications and networks. Also would the 504 be useful in this case for the latter? Help much…
-
SANS registration question
Signing up for my latest SANS class/test and the page has a few interesting questions. Always filled them out before, but this is the first time I wondered if anybody ever got turned down based on their answers? Know anybody? NOTICE: This section is only required if you have selected a GIAC certification. Your…
-
GCIA Study Material
Besides the official books what are some decent supplemental reading to get my hands on?
-
GCIA Practice Tests
Anyone have a practice test still available they won't be using? Would love to take it one more time before next weeks real test. Thanks.
-
Passed GCIH
Hi guys, long time lurker here, figured I would give back to the community by writing down my experience with passing the exam. Company paid for a Simulcast of the SANSFIRE 2016 session in June - I thought it was interesting but to be honest, did not pay very close attention to the material. Been in InfoSec for a couple of…
-
GCIH Indexing Question
For anyone who has taken the test, was it worthwhile to index [Hacker Workshop 504.6] and the [Bootcamp] book? I am taking the test soon and i've combed through every page of the actual lessons 504.1-5, leaving no stone unturned.
-
Need Help Deciding (Poor Forensic Guy)
So, I'm new to the forensic world, and after some good experience extracting data off of cellphones, HDD's, and etc. I thought it's time to treat my self with getting some certified certificates. So, cut a long story short, I've done my research, made an account on this amazing website, did some reading on the GIAC…
-
GIAC Python Coder (GPYC)
I just saw this today and it's new. Just putting it out there. Certification https://www.giac.org/certification/python-coder-gpyc Training https://www.sans.org/course/python-for-pen-testers#results
-
GCIH Instructors
I am trying to plan for the SANS 504 course and wanted feedback on some of the instructors. Thanks!
-
SANS Las vegas 2016
Just checking if anyone is going to SANS Network Security event in Las Vegas. I am going for GPEN with Ed Skoudis and really looking forward to it. Cheers and see you in Vegas.
-
GCIH Practice Exam Sweepstakes
Someone gave me a practice test, for an unrelated to GCIH exam. I felt bad knowing I have practices tests for other exams that I won't be needing, holding on to like antiques. I have to now return the favor. First one to PM me a SANS ID gets the GCIH practice test. Thanks, UKnowWho
-
Pre-requisites for SANS GCFA (508) -> CHFI
Dear all, Have been sponsored to go on the SANS 508, however do not have a solid background in Forensics and have enrolled to do CHFI to give me a base start. Would this be suffice considering the fact that the cost to do 408 along with 508 is prohibitive? Best wishes
-
GSEC Practice Exam for grabs
I have 2 GSEC Practice exam. If you want them just PM me your email address or SANS ID. They expire 21SEPT2016. Also have a GPYC practice exam. That expires 3DEC.
-
Sec504 - GCIH - Practice Test harder than Real Exam?
I'm preparing for the GCIH exam for June 30th - I just took 1 practice GCIH exam. and i didn't do well on it. I got 50%. maybe i should have studied a bit more? but according to some people here - the practice exams are tougher than the real test? is that about correct. also - there were questions where maybe i spent to…
-
Switching stream to security - GCIH or CEH
I am trying to switch my career from application development to security, owing to more interest in latter. As a first step I am trying to get some certifications in my resume before I start searching for a job (as my current employer does nothing in the security area). After few hours of google search, I found GCIH quite…
-
GSNA GIAC Systems and Network Auditor Materials & Exam thoughts
Not a lot of posts about this here, so throwing in my two cents. Got the materials a few months ago, did ondemand, took the test. Don't have time to write a big thorough write-up, but I'll throw some info out there for people who may be interested in this in the future. I took the class because I'm a technical guy who…
-
GCIH or GMON
I am trying to plan for next years training. I am wondering which course I should pursue first? GCIH or GMON? My current role is focused on the defensive side. Thank You!
-
SPECIAL: Special for HIMSS - Implementing Healthcare Cyber-Hygiene with the Critical
Anyone have any experience in healthcare IT and know whther this course is relevant? https://www.sans.org/course/special-for-himss-implementing-healthcare-cyber-hygiene-with-the-critical-security-controls
-
Passed the GCIH an hour ago
Was like fighting a pitbull to remove a squealing live rabbit from it's jaws! Bunny is battered, but alive. Otherwise, also makes me think of the scene from Swordfish: https://youtu.be/u1Ds9CeG-VY [video] https://youtu.be/u1Ds9CeG-VY[/video]
-
Anyone done SEC579 Virtualization and Private Cloud Security? Better than CCSP?
I'm thinking about doing a cloud security training. I found SEC579, but I'm wondering whether this is a worth while training since it is quite old and seems to be more about virtualization than cloud security. Did anyone here take this training? Would you recommend it? Would I be better off doing a CCSP training? TIA!
-
Attending GCIH this week
Hey all, I will be attending the SANS event in Virginia Beach this week and I will report back to this thread afterwards to provide insight on my experience with the course. I am also currently taking an Incident Response course in my DSU MSIA program so I am hoping this course will help with that as well.
-
Question regarding SEC401: Security Essentials OnDemand course and GIAC GSEC test
Hello, I decided after months of thinking and evaluating that my 40's birthday gift it will be a SANS course because I really need a boost in my career. I have an Bachelor of Science in Network and System Administration, 10 years work experience in IT and som certification that are getting more than 10 years old now and…
-
Starting GCIA after stopping
My company paid for my GCIA to do, but they took longer than expected getting it that I never had time to do it in the evening(also doing a MSc and got a young family). I now have time to do it, but cant seem to get to the extension page to pay for an extension, the time had already ran out a few months back. Do I need to…
-
Passed GLEG today...
This was my first SANS test so it was kind of a weird experience. I am used to exams where they test comprehension and knowledge. This exam was more what does the book exactly say. I was kind of shocked. Not used to that. I am used to thinking it through and applying knowledge. Regardless I passed with a 82%. I was above…
-
GPYC worthwhile?
Is this the best python cert you can get? I haven't really seen many others. I'm looking to get into pentesting in the future and was curious if this is worth getting> THANKS!
-
GCIH - Live or OnDemand
I was just approved to take SEC504 this fall/winter... and I am trying to decide which route I should go, OnDemand or Live. I have taken two other SANS courses (SEC401 and MGT414) in OnDemand format and enjoyed being able to study over a 4 month period and on my time. The reason I'm asking is that I have seen multiple…
-
GCIH coming up on 5-25-16
Just as the title says. I have the GCIH coming up. I have taken the 504 course on demand. Done the videos, and am working through the audio. I have built a good index and continue to tweak it as I get closer to test day. Any last words of wisdom as I get closer to the test day would be great. I am shooting for 90%+
-
is it just me or did SANS jack up its prices
I took a SANS course last year, specifically FOR 408 and I remember the price was somewhere in the range of $4500. And this was sometime around last May. I check the prices now and they've reached $5620!! even the GIAC exam attempts increased. Am I missing something or did they just increase the prices ??
-
GPEN in Baltimore in October
Been fighting for this for a while. Got final approval yesterday. Will book class and travel on Monday. (New rewards card coming in, woot!) I am super stoked. 37 CPEs with my name on them. Any recommendations for a first time SANS class attendee?
-
Gcih - sans 504
Just signed up for SANS SEC504 with a GCIH attempt. Can't wait to get the books and study hard I will post with my progress and impressions for those who are interested.
-
Facilitating FOR 758 Cyber Threat Intel
I am happy to report that I got accepted to facilitate FOR 578 Cyber Threat Intelligence in Chicago. This is my 5th year in a row doing Work Study. I submitted 4 or 5 applications this year, got one denial a few months ago so I still have a chance of do another one later this year. This worked out perfect as I will not…
-
Study GCIH
Hi All, I have took the GCIH (504) training 3 years ago,unfortunately didn't take the exam ,is it possible to study the old course material (2013) and pass the exam now ? Appreciate your help and advise.
-
Passed GCIH
Just getting around to posting this now, passed the GCIH back on 6-9-16 I took the SEC504 course through work study at SANS Security West in San Diego with Bryce. Followed the usual template of watching the OnDemand videos, make an index, take both practice exams, updated index and PASSED. Cheers! On to the next thing in…
-
If you have to choose ...
hello I am thinking of taking two SANS training/Certifications maximum ( my own money). so if you have to chose one or two [no more] in your career , which one (s) will you take with 10 years security background ? thank you
-
SEC501 GCED Book Index?
Does anyone have an Index for the Enterprise Defender 501 books they'd share with me? I don't care if it's handwritten in crayon or professional grade. Anything would be helpful. Would appreciate it tremendously. Thanks
-
Passed GPEN
So after buckling down and cramming the last month I took the exam yesterday and passed it. I took the ondemand coarse about a year and a half ago work just really had me swamped not allowing for much time to dedicate to it. A member of another forum was nice enough to hook me up with an index but it was no good for me.…
-
Passed GCED
Just passed with a 92%. Finished with about 20 minutes to spare. I got a 93% on practice test 1 and 90% on practice test 2. Most of the questions were not too difficult. There were at least 3 questions where I referenced what I was pretty sure was on the correct only pages in the books on and I still could not determine…
-
How big was your index?
I'm currently working on the last leg of my GCIH prep. I attended the course in October, watched the OnDemand version, perused the Skoudis Counter Hack book, played with the tools, and finished the first round of indexing the books. For some reason I fell my index is not where it should be. Or is my mind playing games on…
-
GIAC Index's
Hi Guys, I have a colleague who is interested in viewing my index for the GCFE. I have seen people asking for index's here so I assume it is fine? Thanks.
-
Passed GCED
Used classroom training, and a week of On Demand, practice tests and self-study to pass with an 83. While nowhere near what I wanted to score, I am satisfied with the results. I will say my Index was next to useless as I either knew the material or I didn't, the exam itself was much more difficult than GSEC. Now on to…
-
Passed GCED today.
Took the GCED after studying for it this weekend. Passed, but once again my score could have been a lot higher. I was really drained after the first hour and a half. In terms of the class, I don't think 501 is really worth taking. I have taken 401,501,504, and 508. 504 goes into incident handling a lot more in depth. The…
-
Passed GCED
Just passed the GCED. I found the exam to be fairly easy, with a hint of challenge thrown in. I made a 30 page index, which I referred to for probably 30 questions, either in the notes column or by flipping to that page in my books. A few of the questions I referred to my index for were ones that I already had the correct…
-
GCED Passed
Passed with an 88%..so close! Overall, I didn't think the exam was too tough. I took 501 at SANSFIRE in Baltimore back in June and put off studying until ~a month ago. Definitely learned a lot in the course and I'm glad I took it! Building up to the exam, I: - Did an initial run-through of the books and built my index as I…
-
GCED - Passed!
Passed the GCED exam today. Only a 87%, but I was getting antsy and click happy by the end, lol. While my employer paid for the class, I shelled out the $599 for the discounted exam on my own, so I went in VERY nervous hoping I wouldn't be flushing that down the toilet. My tips for passing GCED (and presumably and GIAC…
-
Passed the GCED Today
Passed the GCED Today:D After spending 6 days at a downtown Chicago hotel in September. I finally took my GCED exam today The only reason I took this class is because work paid for the Work Study Program and this was the only class available for me. The test lines up pretty well with the class/objectives and there's a bit…
-
Passed GCFA today
I started the FOR508 online class on 6/21/16. I watched two of the videos but got a little bored with them so I just used the books. I read each book 3 times and did the labs once or twice. I did not do the forensic challenge yet but I plan on doing it soon. I was able to get an extra practice test from someone on here so…
-
Passed GCIH today - 91%
Took the class via the work study program back in April and spent about 6 weeks studying, while cramming in another class (SEC 401) in that time. Talk about brain overload. In any case, the test was nerve wracking, I was up to 97% about half way, then all the sudden things dropped down to 89% and so did my confidence, got…
-
GCFE Self Study resources and tips
Good Evening everyone, This is my first post here, please be gentle :) When I pass my Security+ exam I am planning on going for the GIAC GCFE exam. I've spent a couple of days looking at books for self study. I've learned that GIAC/SANS do not publish books nor do they have recommended books listed. I've seen several books…
-
GSEC attempt without coursebooks
Sorry beforehand if this post sounds ignorant. I'm currently an ICS auditor in O&G, looking to move more into netsec to hedge my career for the future. My company is not providing any sort of sponsorship for taking the GSEC exam, and since i'm doing it out of pocket, i'm wanting to do it the most efficient way possible ie:…
-
Flunked GCIH today
I got a 70. Lost a lot in the first quarter of the test averaging 59. By the second and third quarter I was at 69. Bumped it to 70 by question #145. Practice test 2 was score 71 Practice test 1 was score 60 I'm greatly annoyed as this was a cert I don't really want, but my job had pushed me to take to meet a contract…
-
GMON - Passed!
Sat for the exam today and scored a 77% (definitely would have liked a higher score, but pass is a pass). It was definitely slightly harder than the practice tests, but I felt it all ultimately aligned. After the first 15 questions I was at 100% and thought "oh this is so easy" that was a very bad mentality to have because…
-
Cleared GCIA - 87%
Exam : GCIA -503 Preparation : Courseware : Official Courseware from SANS - OnDemand Training Build up to the exam : Completed all the books 10 days before the exam and revised the books for 5 times in the next 10 days Index : Had gone through the books enough number of times to remember the topics and information covered…
-
SANS 408 - GCFE: A Post-mortem
Took SANS 408 with Heather Mahalik in March 2016 as my first SANS class. Here are some photos on how I organized my textbooks and index: https://imgur.com/a/wOWCG As you can see, I labeled the major portions of the textbooks using color coded sticky notes. For me this was hands down the most effective way to easily search…
-
My Journey to getting the GIAC Security Expert (GSE) certification
Since the age of seven years old I have been playing with technology and attempting to figure out how it works. With this passion for technology and supportive parents, I had built my first computer at the age of eight years old. As the years when on, I decided to enroll in a High School that specialized in Information…
-
GCIH Self Study
Hi all I am interested in doing the GCIH but cannot afford to attend any of the classes. Has anyone on this forum successfully completed the GCIH certification by self study? Please advise what study material you used.
-
New career path - GIAC or Security+ ???
Ok so I've been in an IT administration/load-perf testing position for about the past 2 years and need a new direction. I've got a few leads for new jobs but I'm not sure which to work towards. In my interview yesterday the Ops Manager told me that HR people (in all their mighty wisdom) look for CISSP or Security+, but…
-
SANS Work Study HELP!
I got a call saying that I was accepting for San Antonio 2016. Which is in 10 days. I think they sent the packet to my old email which no longer works. I've tried calling back and it goes to their voicemail. I'm sure they will get back sooner or later. Should I just wait for their response or does anyone have any tips? I'm…
-
GPEN v ECSA (also anyone done SANS 561?)
Dear all, Have the option of doing either of the above through my company. Please let me know your thoughts. Have heard ECSA is good as hands on test is required prior to sitting for the exam. how is the GPEN in comparison? Looking for something to develop my hands on skills in pen testing. Also has anyone taken SANS 561 -…
-
Request: GCFA Practice Exams
Curious if anyone out there has a spare GCFA practice test they'd be willing to give. Getting ready to take it this Friday and wouldn't mind the extra practice. Cheers, George
-
SANS FOR508 Next!
Today my bosses boss came up to me and said they were contacted that another agency was receiving SANS training and they had some open spots if we were interested. I took a look and seems it was for FOR508! Looks like we lucked out and were given the spots. Hopefully have my GMON passed before hand and then on to the next…
-
Passed the GSLC
150 questions and 4 hours for the exam, took about 3 hours and still felt like my head was put into a juicer and squeezed for the entire time. Got a 93%. As far as studying, took the class 2 months ago and worked over the last 5 or so week to go through all 5 books and build an index. I was able to find most of the…
-
Who's got two thumbs and is going to SANS VB!!
This guy! <---- I will be attending the SEC503 course taught by Kevin Fiscus at SANS Virginia Beach at the end of August. Thanks to my employer for footing the bill! So excited to finally be attending SANS training and challenging the GCIA. I will be utilizing all the info posted on TE to help me prepare. I am getting…
-
GMON scores
For those that have taken/passed the GMON exam, I wanted to know what your practice and actual exam scores. Did you feel the exam was different that other GIAC exams as far as difficulty? How did the actual exam compare to your practice exams?
-
Changing Careers-GCIH Training/Exam
Hey guys, I'm posting on here hoping to get some guidance on the GCIH path, InfoSec careers and how the GCIH cert fits into the long-term plan of succeeding in the field. About 3 months ago I decided to make a career jump to InfoSec--I came from a Corporate Security Analytics background. It was a heck of a risky move. I…
-
I passed GCIH exam
I'm very happy that I've passed GCIH exam today with 87% score. I dedicated really a lot of time to prepare for this. Thanks to this community for their advises. Index pages are really helpful if it is good index. I took 2 practice tests before exam and my scores are: 1st Practice Test: 74% 2nd Practice Test: 84% Exam: 87%…
-
Good News, SANS Increases prices again!
Good news, SANS increases the price of courses to $5,910 starting in December at the Washington DC conference. My training coordinator will be more than relieved they they will no longer have to worry about having unused training dollars at the end of the year they have to figure out how to spend. Unfortunately the cost of…
-
SANS Spam
The one think I really hate about SANS is there endless email spam. It's bad enough they send me email to register for every conference and training they offer. But they even solicit me to attend courses I already taken. I'm seriously considering adding them to my spam email folder. You would think a top notch security…
-
Sans gcih
Hello, So im planning to study for the GCIH test in the future from what I read its a Open book test and you are allowed to index the information that being said I find it hard to fail with a open book. so my question to you guys is how was your experince with this test and how hard or essy was it? Also which book would…
-
Passed GCIH
Took the GCIH today even though I didn't feel fully prepared. I started a new term in WGU last week and couldn't juggle them both so I bit the bullet. I only scored a 78, but I passed and I couldn't be more happy. I was fortunate enough to do work study @ pentest Austin and it was amazing. Afterwards my studying wasn't as…
-
I passed the GCIH exam
Method of Study for the GCIH: SANS On-demand and practice testsPrep time outside the time to take the course: 70 HoursThank you to everyone on this site for their help. I passed the GCIH today. I felt that the actual exam was about the same as the practice exams but just a little harder. I took three of the SANS GCIH…
-
Under the gun on GCIH
SANS deadline to take the exam is 6-27-2016. Work is imposing a deadline of 7-18-2016 If I take the exam 6-16-2016, and fail, I still have 30 days to take again before the contractual deadline by my job to get the cert. SANS imposes a 30 day wait period after exam failure to retake the exam. I had finished indexing the…
-
GCIH course!
Just got chosen to facilitate the SEC504 course this summer! first time going to a SANS course! PUMPED
-
GPEN Practice Questions
So I took a look at. Does anyone have any experience w/ sites that have legit study material / questions. I still have two practice exams which I will be taking in the next couple of days, but time is counting down and I want to make sure I am well prepared before I take this test. Any advice would be greatly appreciated.…
-
Netwars
I would like to hear from anyone that has participated in Netwars. I'm taking SEC504 next month and was told that there is no additional cost for Netwars since I will be in a six day course. What should I expect? What was your experience like?
-
Gaming the exam expiration date
I had thought that the expiration on my exam date would have been 120 days from the end of the SANS course. This would have placed me around mid-May. I just looked at my SANS portal and see that the expiration is actually end of June! Woohoo! more time to study! Looking at the SANS course website, the verbage is actually:*…
-
GCIH exam soon,need advice
Hello all. I've scheduled GCIH exam on June 9. Read all books,did almost all labs but everything in my head just seems little confused. For those,who have passed GCIH exam, what advice will you give to prepare well for the exam?
-
SANS Work Study Acceptance - SEC511 (GMON) -Melbourne, Australia
I have just finished arranging travel, accommodation and payment for the Work Study program to facilitate the SEC511 cours in Melbourne, Australia next week. They gave me less than 14 days notice which is not ideal but I need it to re-certify at least one other paper and hopefully pass the exam to re-certify another. I…
-
GMON 511 Work Study
Long Time Lurker, First Time Poster I'm wrapping up day 3 of the SANS SEC511 - Continuous Monitoring and Security Operations, for which I am facilitating as part of their Work study program. I gotta say, this class is great and out instructor is awesome. The main takeaway so far is that for me at least, outside of the good…
-
GSEC practice exam available
I'm paying it forward and have 1 GSEC practice exam available. First PM with correct info wins :)
-
Currently in GCFA Course
Hello All, I'm currently taking the GCFA course thru SANs online and the instructor is giving much information on things to pay attention to when creating an index. I was wondering if anyone would be able to share a index either from the 408 or 508 class. I want to get an idea on what to highlight in my books as I start…
-
GMON practice exams
Wanted to see if anyone had any practice exams available for the GMON exam. Unfortunately SANS doesn't have practice exams available for separate purchase, since this is a fairly new exam. I may bite the bullet on this one. Let that be a warning to those studying for the newer exams. If you do, please PM me. Thanks in…
-
SANS ON-Demand Courses
Hello, Has anyone here taken the SANS ON-Demand video courses? I am currently looking into this but wanted to get some opinions from people who've actually used it. If so how was the quality?
-
GREM Passed....93%, details inside
Hi all, I recently took the GREM exam and wanted to share back a few details as earlier posts were helpful in my studying. Before I took the course in April, I went through the Practical Malware Analysis book in December and made it through 70% of it. (If you are able to do the all the labs without any assistance, you can…
-
Passed GSEC - tips for preparing the exam
Hi everybody, first post here. I recently passed GSEC, and I'd like to share my thoughts on the exam for those considering to take it or actually preparing for it. I am a newcomer to IT security (this is my first cert), with a good background in Linux and programming (mostly numerical methods in Fortran and Python). A…
-
Changing careers
Hi All, I'm changing careers after 20 years in oil and gas. I've always wanted to get into IT but never really had the time. I now have about 3 1/2 months off to prepare, but don't know the correct course to take. I've looked into the CompTia Network+, and the Sans GSEC course. It seems Sans have a better training program…
-
My Job is requiring GSEC how should i go about beating this beast
So my company wants me to get the GSEC as a requirement I Have passed CISSP and Security + on a scale how comparable are they to GSEC what are the best material to use to pass GSEC any advice would be great.
-
How an API application in DMZ should access a database with sensitive data in a LAN?
Hello! I'm creating an API that should be accessible from outside and will be reside in a server in DMZ. But this application should access our internal database (contains sensitive data) that is located in LAN. For security reasons DMZ shouldn't have any acess into LAN. What should I do in this case? LAN: secure and…
-
Gmon/sec511
TL;DR Great course content, easy exam. Would probably be a good one to challenge if you have been doing infosec for awhile and want/need a SANS cert. Just passed with a 92, in about an hour. The course material is outstanding, but I found the exam to be almost disappointingly easy/entry level. Or at least it felt entry…
-
GCIH passed
I joined this site to get some advice on the GCIH test. I mainly read over everyone's posts and took advice on their experiences. I passed my exam on 12/19 and thought I'd share my testing experience. I did the SANS on demand training for SEC504. I started the training in mid November with watching the videos while I was…
-
GXPN and GSE
I was looking for opinions on the GXPN and the GSE - the GXPN would essentially serve as training for the OSCP that I plan to take in or around august, and the GSE seems like a much more involved (and expensive) CISSP, which is probably understating it a bit. Are those two worth the money/time investments? I would…