Why sre SANS certifications so undervalued?

I have my GSEC and I am getting my GCIH soon and my CISM soon. For some reason the CISSP which I don’t think is that impressive is way more valuable than the SANS stuff. Also my CRISC is too and the CISM will be. The crazy thing is i feel like the SANS stuff made me a better security analyst. The other certs did not. Something needs to be done to change the industry so that companies understand the CISSP is not as valuable as the GSEC for example. Hands on and practical vs high level question and answers seems like a no brainer to me. Feel free to agree or disagree.

Find more posts tagged with

Free for TechExams community: Cybersecurity salary guide

Compare cert salaries and plan your next career move

Button

Comments

cyberguypr

Do you mean simlets or full on practical exercises?

markmorow

I dont know what I can share but they were just like the practice exam where the question asks you to perform an action or determine something using the tools from the class. It was a machine with a command prompt and all that in the browser.

Randy_Randerson

cyberguypr wrote: »

GIAC exams are not hands-on, for now.

SEC503 and SEC660 both have hands on portions. I Beta Tested it for SEC504 last year as well. So I'm guessing it is next in the docket.

TechGromit

chrisone wrote: »

Excuse my ignorance but the GPEN exam you don't actually pentest anything during the exam? .......

No, now you might be given something to analyze (packet capture, malware sample, results of a vulnerability scan) and they ask you questions about it, but GIAC exams are not interactive.

Randy_Randerson wrote: »

SEC503 and SEC660 both have hands on portions.

These are not exams, these are courses. The GCIA and GXPN exams may have something to Analyze during the exam, but I don't believe they are interactive at all.

Randy_Randerson

TechGromit wrote: »

These are not exams, these are courses. The GCIA and GXPN exams may have something to Analyze during the exam, but I don't believe they are interactive at all.

Sorry for not talking in the 4-letter certification. But both GCIA and GXPN have hands-on portions for the GIAC tests. Hence why if you look them up they give a range of the number of questions and not a set amount as you would see for others. They are interactive. The same will most likely be for GCIH as I beta tested that last year. It gives you a scenario and asks you to go into a VM and find the answer within that VM.

ITHokie

TechGromit wrote: »

No, now you might be given something to analyze (packet capture, malware sample, results of a vulnerability scan) and they ask you questions about it, but GIAC exams are not interactive.

These are not exams, these are courses. The GCIA and GXPN exams may have something to Analyze during the exam, but I don't believe they are interactive at all.

This is not true. I've taken GXPN - the last 6 questions or so involve you being dropped into a VM and interacting with it to get the answer.

cyberguypr

I also SME beta tested the VM scenarios for GIAC a while ago. I just had no idea they went to prod with them.