"S" or not :)

trackit

So... i will be sitting for 298 on tuesday. Im a little intimidated by the "case study" question format as i havent done it before, but i hope i will be fine. If i indeed pass it, then that concludes my MCSE and im allready thinking what should i do next. I wonder about that extra "S" for my MCSE if you know what i mean. I chose 299 as elective so i only need to pass 1 more exam to get that security specialization.

So my question is this, should i go for security specialization? or should i go straight to upgrading MCSE to MCITP? how much if any, will this "S" make my MCSE more valuable? have you seen job requirements specifically mentioning MCSE:S?

I think that i will still decide to go for that S though, so that raises another question, which exam is more sensible, ISA server or security+ (or is there more options?).

HeroPsycho

Honestly, Security+ would do you more good. I have both Security and Messaging, and I don't ever remember anyone saying they were impressed by that.

trackit

maybe i misunderstood you, but i get contradicting statements from your post... you say that security+ will do me more good and at the same time you say that people arent impressed by specializations for MCSE. If i wount go for security specialization for MCSE then there is not much point in passing security+ either, or is there? (security+ counts as elective for MCSE:S, thats why i concidered it).

Anyway, i see from your sig that you have passed ISA 2006, was this material very ISA specific, or will i learn something valuable form studiing for ISA 2006 even if im not gonna build ISA based firewalls or proxys?

Slowhand

What HeroPsycho means is that the Security+ stand-alone certification has more recognition and is more highly regarded than the MCSE: Security specialization. 99% of employers will generally want to see MCSE on you resume, they don't care and/or don't understand what the Security or Messaging specialties are. Keep in mind, as a "plain" MCSE, it's assumed that you know not only Windows Server 2003, but also Exchange 2003/2007. That's why so many people go for the messaging exams as well, because they need the information for their own sake. The same is true for the security tests, most people do them so that they'll understand the material because they're expected to know security, not necessarily because the security specialty is more prestigious. . . outside our little IT-geek circle, that is.

My advice, go for the Security+. You'll have the additional cert, you'll have the added bonus of MCSE: Security as a little bit of a boost, then go and upgrade to MCITP: Enterprise Administrator. The extra time studying for Security+ is worth it for the stand-alone cert.

trackit

ok, thanks for your input.. i guess i will look into security+ more closely then.

HeroPsycho

trackit wrote: »

Anyway, i see from your sig that you have passed ISA 2006, was this material very ISA specific, or will i learn something valuable form studiing for ISA 2006 even if im not gonna build ISA based firewalls or proxys?

I've taken both ISA 2004 and 2006 exams.

The exam is of course ISA specific, but some concepts do translate to other firewalls and proxies, such as WPAD autoproxy configuration, how web caching works, opening ports, etc. However, it's important to note that ISA's interface and how you go about things is very different from other devices such as a PIX, ASA, Sonicwall, etc. (virtually no command line mechanisms in ISA 2006 for configuring it, for example)

Use the Tom Shinder ISA 2006 book for preparing. One of the best product specific tech books I've ever read in it's ability to clearly explain the concepts of the product and it's thoroughness. Supplement the book with Microsoft's guide that's freely downloadable for how to migrate from 2004 to 2006.

http://www.amazon.com/Shinders-Server-2006-Migration-Guide/dp/1597491993/ref=pd_bbs_sr_2?ie=UTF8&s=books&qid=1236973718&sr=8-2

Ignore the title being a "Migration Guide". This is the same book as he had for 2004, but updated to cover the new stuff in 2006.

If you do choose to get MCSE: Security, I would highly recommend making ISA 2006 one of your electives, because a certification in an enterprise class firewall such as ISA is helpful for your career, plus you gain an MCTS certification.

trackit

thanks for the info!

since you have done both ISA 2004 and ISA 2006 exams, can you tell how big is the difference between the two? I know ISA 2006 is notorious for not having too much material for exam preparation... so can one use some ISA 2004 material aswell (like some cbt-s or something) or this is not a good idea.

HeroPsycho

trackit wrote: »

thanks for the info!

since you have done both ISA 2004 and ISA 2006 exams, can you tell how big is the difference between the two? I know ISA 2006 is notorious for not having too much material for exam preparation... so can one use some ISA 2004 material aswell (like some cbt-s or something) or this is not a good idea.

Go look at posts in this forum about the exam. We've discussed it plenty. In short, the exams are virtually identical.

I tried using CBTs for prepping for ISA 2004 originally (tried both CBT Nuggets and Train Signal). Trust me, get the Tom Shinder book! Clicking through the interface in ISA is very very easy. Understanding what you're doing, or how to setup ISA properly is not easily taught in a CBT. After reading the Tom Shinder book and messing with the product on your own, not only will you be able to pass the exam, you'll thoroughly understand the product beyond what is required for the exam.

trackit

ok thanks... i will check out this book

rob7278

Also the Security+ cert allows you to shave 1yr off the 5yr experience requirement on the CISSP; can't remember off the top off my head if the MCSE also lets you take off a year.*checked MCSA and MCSE also enable you to shave of 1yr of the experience requirement*

smg1138

rob7278 wrote: »

Also the Security+ cert allows you to shave 1yr off the 5yr experience requirement on the CISSP; can't remember off the top off my head if the MCSE also lets you take off a year.*checked MCSA and MCSE also enable you to shave of 1yr of the experience requirement*

I have a follow up question on this. Can you only use one of those certs to take a year off the experience requirement? For example, say you had an MCSE and Security+, would those combined take 2 years off or is 1 year the maximum?

wastedtime

smg1138 wrote: »

I have a follow up question on this. Can you only use one of those certs to take a year off the experience requirement? For example, say you had an MCSE and Security+, would those combined take 2 years off or is 1 year the maximum?

Only 1 year off. It doesn't say that on the "Experience Waiver" page, but it does at (ISC)² Security Transcends Technology.


Also this probably would a bit more appropiate in the (ISC)² SSCP and CISSP form.

smg1138

wastedtime wrote: »

Only 1 year off. It doesn't say that on the "Experience Waiver" page, but it does at (ISC)² Security Transcends Technology.

I knew that seemed too good to be true. I've done 1 year of Computer Forensics and I'm close to getting my MCSA, so that should get me 2 years right there. I've been assisting IT Security a lot in my current position, so maybe I could get that counted as well.

wastedtime

smg1138 wrote: »

I knew that seemed too good to be true. I've done 1 year of Computer Forensics and I'm close to getting my MCSA, so that should get me 2 years right there. I've been assisting IT Security a lot in my current position, so maybe I could get that counted as well.

From my understanding as long as you have a total of 5 years in at least 2 of the domains or 4 years plus a waver for 1 year. I don't believe it matters if you have changed jobs as long as you can prove your experience.

Mojo_666

HeroPsycho wrote: »

Honestly, Security+ would do you more good. I have both Security and Messaging, and I don't ever remember anyone saying they were impressed by that.

+1

With the exception of a mate of mine I have never met anyone who knew that the specialisations existed, and while were on the subject I over heard a guy talking about his certs the other day and he said he was an MCSA and an MCP in Exchange and that is what he put on his CV.

Having said that I am still glad I have it.

Devilsbane

From the sounds of it, the s might not be that powerful, but here is my thinking.

I want Security+. I don't need it this moment, but I will want it in my career. Why not get it now while it is a lifer.

I already need to take the 298 as part of the MCSE (well I don't have to, but it is one of the options). And since the material is close to the 299, why not take that too and then get the extra specialty?

Having a MCSE:S over an MCSE certainly won't hurt you. It might not help you but at the very least it could be a conversation starter in your interview. "I see on your resume that you listed one of your certifications as MCSE:Security, what is that?" and then you can go ahead and let them know that not only did you do the 7 tests required for MCSE, you did 2 more. Plus you can also list the security+