Hi to all.
My employer has kindly allowed me to do the SANS 502 On-demand training, they wouldn't spring to the course in Singapore in October

I have already passed my 503 GCIA and numerous Sourcefire/Now Cisco exams. I am after any advice if possible, I constructed an index for all the previous exams, and included basic header information and switches for the likes of Nmap, scapy and Snort.
I have attached a screen shot of my 503 index, is this the type of way I should be going, its a long time since I have done a SANS exam, the most recent have been closed book.
Any help and guidance is appreciated
Keith