what?

curio

OK I have now run out of what I would call my natural exams - that is stuff I have to work on all the time. If I go on for MCSE I have to tame the beast and as I don't have an enterprise network to play on that could be a problem, all the networks I work on are small-ish. I do have a copy of Windows 2003 Server RC2 so could go there, Linux+ just seems like a cert I don't need although I would likely pass quickly. I am thinking maybe 70-224 for exchange server as I get to play with SBS quite often. Anyone have any thoughts on that path - or should I just go on for the beast? I was thinking maybe avoid the beast for as long as possible (maybe it will go away?). I have got my Linux box out just to use it a bit cos it has been neglected while doing all the MS exams, your site is still cool in Konqueror BTW.

curio

Now I know I need 70-214 for my SECURITY specialization - I'm going for that and just ordered the MS Press book. Security is a pukka and interesting specialization and from what I have seen an under-populated area of expertise. I wonder if you get a new welcome kit from MS when you get the specialization? Actually I wonder if anyone ever gets a welcome kit from MS.

cheeblie

You did logon to the MCP Secure Site and tell them to send your Welcome Kit, correct? That is the only way they will send it to you; well maybe a phone call would work too. They won't automatically send the kit. You have to verify that the address is correct, and then they will send it.

Cheeblie

cheeblie

I agree with you that security is a specialization that needs to be filled now more than ever. I find the security aspect of networks very intriguing, and this is why I am pursuing MCSE:Security. After I get my CCNA, I will also aim for any Cisco related security certifications. Later in my career I will also try for CISSP and GIAC certifications. Hopefully not too many people are training in security, because I would prefer to be one of the few skilled workers in that field rather than be one of many .

Cheeblie

ciaban

cheeblie

Seems like the info sec world is gaining speed and starting to fill fast. After all my research, the CISSP is the most popular with employers and job hunters. Plus, you can ger a ISSEP cert (specialized cert after the CISSP dealing with system security and qualifies you to contract/work for the NSA - next 5 at least). for those that consider yourselves an elite, it's probably the holy grail for certs now. Giac is trying to compete with the CISSP but there is still a 10/1 ratio.

Pay scale seems nice too once you have a min of 2yrs exp (CISSP requires 4) and the cert.

RussS

Be prepared to be one of the many Cheeblie. I hear that a very large number of MCSE are going to get + Security when they upgrade. A local company with about 10/12 IT staff is sending them all to do Sec+ as part of their basic training - I think this has to do with various schools talking up the value of Comptia Sec+. Kind of hard to tell, but in all honesty just about every site I have visited (including ISPs) had totally crappy security and a half way decent hacker could burn them easily if he had a reason.

curio

Yes I did all that signing on and requesting it stuff, and then again for MCSA. I will wait for the 6 weeks to be up before I start throwing my toys out of the pram - but then, oh-boy!
My confusion with the Security+ came from the MCSE page where it states Security+ counts as both an elective and a specialisation - so I thought it counted twice. If I hadn't been so hopeful I would have looked into it and seen it stated that you needed 214 as well - my bad.
I see you can do 220 as the design to get the full set, woohoo!
For anyone still keen on security issues here are some top bits of kit to try out
Angry Ip scanner - top scanner.
Dameware - absolutely and unreservedly awesome.
NMapwin - what it says on the tin
Netcat - you know that already
Mingsweeper - need to persevere with it but cool
Firewar - interesting, a webpage that can use ActiveX to disable most firewalls as well as an executable.
I did laugh when I saw Elitewrap mentioned as a trojan - I know that some AV sellers call it a trojan but that's just for the people that can't understand computers. After all they call everything a virus just to keep it simple. I wish you all the best of luck in whatever exams you are going for but more importantly a complete and zen-like understanding of the subject matter. I didn't see one q on Sec+ that was confusing in any way but now after winding down a bit I do remember having a kerberos question after all.