Is GSEC Brain-Dead Easy?

dynamik

While I was taking my exam the other day, the guy kitty-corner from me was taking an open-book exam. He had four large InfoSec books with him, so I snuck a peak over his shoulder while the proctor was setting up my exam. It was the GSEC, and the question this guy was stuck on was clearly Security+ material. I probably peaked over there five or six more times (I have great eye-sight) throughout my exam because of all the racket this guy was making going through his books. Each question seemed as easy as the first one I saw. I wanted to just give him the answer to keep him quiet

Is this exam basically just a SANS Security+?

wastedtime

Well not sure about the test itself but the DoD considers it IAT II like security+ but doesn't consider it IAM I like security+. Only difference is T is technical and M managerial. I get that from DoD Directive 8570.01.

unsupported

While I am not directly familiar with the current Sec+ objectives (http://certification.comptia.org/resources/objectives/Security_Objectives.pdf), after reviewing the GSEC objectives (GSEC Certification Bulletin) it appears to me that GSEC has far more depth than Sec+.

dynamik

Yea, I have to agree, those objectives are a bit more intimidating than the Sec+. Maybe I've been reading too much security material for fun (like that's possible), and I've gotten a little better than when I was at the Security+ level

I haven't done a security exam in over a year...

JDMurray

The GSEC is famous for asking impractical questions like, "What year was the Vernam cipher invented?"

UnixGuy

JDMurray wrote: »

The GSEC is famous for asking impractical questions like, "What year was the Vernam cipher invented?"

This is just waste of time waste of money !

JDMurray

I didn't mean that all of the GSEC exam items were like that. In fact, I've heard that the GSEC exam has been considerably improved over the past few years. I've was able to thumb through the first book of the SANS GSEC class, and the body of knowedge just in that book alone is imperssive. It's scope goes far beyond that of the Security+. If I had the financial means, I'd start studying for the GSEC right now.

Paul Boz

A few of my co workers have one or more SANS certs and they have all said that the tests are usually very easy if you have followed the coursework and have performed the exercises. Also if you have thoroughly read the provided books and can reference the information within the tests should be no problem.

The SANS courses are more about what you learn during the process than what you can regurgitate on an exam from what I have been told.

rossonieri#1

unixguy wrote:

Quote:

Originally Posted by JDMurray View Post
The GSEC is famous for asking impractical questions like, "What year was the Vernam cipher invented?"

This is just waste of time waste of money !

heheh, why? you dont like history lesson?

*i think*, that simple history lesson actually teach us to determine whether that specific technology is absolete or a current one. so, i should agree with the question

unixguy,
jd was only saying "impractical" that was it - he didnt say that question is no good (like you said just waste of time & money).

no offense guys, just my thought

UnixGuy

yeah I don't like these kind of questions, as I have very bad memory.

But SANS certs in general are highly respectful, and IMHO very important in InfoSec career

BigTone

I was just looking at this course because I noticed that they had a bootcamp headed to chicago. I could possibly be able to pursuade my boss to pay for the bootcamp.... but I might have to foot the bill for the cert. 500 bucks is kind of steep for me right now. What do you guys think? Would I be better off just waiting till I finish my MCSE with Sec+ or is this cert going to look pretty nice on my resume and help me get a foot in the door in the infosec world.

JDMurray

I would recommend getting the Security+ as a preparation for the GSEC. The GSEC covers a vast array of topics as compared to the Security+, and if you are not already experienced in InfoSec, it may take you quite a while to study for the GSEC. Employment-wise, compare the number of job postings on dice.com asking for a GSEC with the number of postings asking for MCSE and you'll see the obvious, near-term direction to go.

BigTone

Thanks....

And the Dice query came up 0 to 27... but you probably already knew that

JDMurray

BigTone wrote: »

And the Dice query came up 0 to 27... but you probably already knew that

Yeah.

dynamik

I think I'm going to focus on the level-5 certs. There are a few I'm interested in. I was looking over the GCFW, and it was pretty intense.

Security Administration Certifications

GCED seems to supersede GSEC, and these are freaking expensive to recertify every four years.

I guess I'd hit GSEC if I was starting out and someone else was paying for it, but I'd rather focus on my time and money on something higher-level.

Paul Boz

dynamik wrote: »

I think I'm going to focus on the level-5 certs. There are a few I'm interested in. I was looking over the GCFW, and it was pretty intense.

Security Administration Certifications

GCED seems to supersede GSEC, and these are freaking expensive to recertify every four years.

I guess I'd hit GSEC if I was starting out and someone else was paying for it, but I'd rather focus on my time and money on something higher-level.

If you waste your training budget on the GSEC I'm going to burn down your apartment.

Get the GCFW or nail the CCNP. Both will serve you well.

dynamik

Change of plans. I'm getting renters insurance and taking the GSEC.

Paul Boz

dynamik wrote: »

Change of plans. I'm getting renters insurance and taking the GSEC.

renter's insurance won't save you when I burn it down and you're sleeping...

dynamik

Good thing you have the skills to steal my identity and set up a life insurance policy.

veritas_libertas

dynamik wrote: »

Good thing you have the skills to steal my identity and set up a life insurance policy.

Okay, that was original and funny!

veritas_libertas

Do you have to go to a bootcamp to qualify, or be able to take the SANS tests? I also heard that the tests are expensive?

dynamik

You can "challenge" them: Challenge Certification

veritas_libertas

dynamik wrote: »

You can "challenge" them: Challenge Certification

Yikes, almost a $1,000 a challenge!

msteinhilber

dynamik wrote: »

Good thing you have the skills to steal my identity and set up a life insurance policy.

Nobody else noticed this was dynamik's 10,000th?

AD200

Hi,

GIAC exams are not cheap! What good security exams are out there besides isc2 or GIAC? What would anyone recommend as a next step after security+?

A

dynamik

msteinhilber wrote: »

Nobody else noticed this was dynamik's 10,000th?

I was saving it for Paul.

That's what she said...

AD200 wrote: »

Hi,

GIAC exams are not cheap! What good security exams are out there besides isc2 or GIAC? What would anyone recommend as a next step after security+?

A

What type of security work do you want to do?

Paul Boz

As said earlier, you can challenge SANS exams for a grand a pop, but unless you have access to the actual up to date course books and MP3s you're more than likely going to waste your money. The exams are open book and are very specific to the material found in the books. I know a hell of a lot about TCP/IP and when I took the first GCFW practice exam I could tell that I would have failed it without the SANS material.

dynamik wrote: »

That's what she said...

Yeah you CLEARLY work for Trace