LPIC, MCSA, or CNWP

/usr

Which certs should I tackle next?

I want to get into information security, and I plan on taking (and hopefully passing) the CEH exam on December 30th.

Whichever path I choose, there are going to be multiple certs involved. At least two for the Wireless route, two (or more) for the Linux route, and of course 4-5 for the MCSA.

I WANT to get the wireless certs first, then the Linux certs, because they interest me a lot. However, I honestly see an MCSA coming into play long before a Linux admin certification or (possibly) a wireless admin certification.

In case you haven't noticed, I hate Microsoft. There are far more interesting things in the IT world.

What are your (honest) opinions? Could I get by without an MCSA? For how long? I need some feedback.

janmike

LostInSpace writes:

I want to get into information security

What about some coding/scripting type of training/certs? I should think that would be a good grounding for info security.

Otherwise, I believe that I would go for the OS certs. That should give a person a really good idea of the systems that are being secured. Yes, I know we get M$ inside and outside from morning to night, but it won't go away. And since you "honestly see" it(being honest with oneself is always a plus), might as well whip it first and then get along with the more fun stuff. Besides, with your CompTIA certs, you only need 4 more exams and you can have MCSA:Security.

I see you've thought this out, because wireless is almost a no-brainer--makes no difference if you're talking systems generally or specifically security. It's never going away.

But, if you have a good sound job right now, and you're getting solid experience along the way, and if you can wait awhile to move to a different employer, then go ahead for the security certs. Probably the greatest motivation for getting the certs is to impress a potential employer(in no way a bad reason). Probably only second to that is to improve one's self-image(whether we want to admit it or not).

Well, Best of luck!

/usr

I'm currently in an internship that I received almost a year ago. I'm currently safe in my job as long as I want it and as long as I'm in school. I have a little over a year left before I get my bachelors degree. At which point, I have a fairly good chance at getting on here full time.

I would eventually like to work for myself, or a smaller, independent security/consulting company.

Regardless...I think I'll tackle my MCSA next. As you said, Microsoft will never go away, at least not for a very long time. I already have the books for the MCSA 2003 server exams, I might as well use them...

nethead

I agree that Microsoft will never go away but at the same time there are so many people out there with MS certs that you would be just one of a crowd.

However it sounds like you've got a good direction to go in. Depending on the size of the company you work for having MS certs would not be required for a wide range of IT jobs - for me unix skills would complement my job better than ms ever will. But for smaller companies I think it will, at the moment, be necessary for MS knowledge as you won't be able to specialise so much and get away from it.

Sounds great that you've been able to work whilst doing your degree as at the moment the experience will be more important than the certs - since most companies won't hire just on the basis of the certs held.

Good luck!

/usr

I'm just thinking that since the MCSA is such a long endeavor, that I would just rather hold off. Possibly until a future job would pay for it.

/usr

I think I'll stick with the MCSA next, then possibly the Linux certs.

I really need to learn the OS's as best as possible, in order to secure them properly.

Webmaster

Surely MCSA is not mandatory for every IT professional. But, as you mentioned yourself, you need to learn the OS's as best as possible, in order to secure them properly.

Although not related to your 'next cert dilemma', the following article should be useful for you:
www.globalknowledge.com/training/olm/go.asp?find=P8_Feature
(2005 IT Security Certification Resource Guide)

/usr

Nice....'updated' avatar.

Sulblk27

Hi LostInSpace....it seems I'm thinking along the same track as you are....except, I'm no where near ready for a CEH exam....I figure I'll hit the CCNA track and maybe mid-year I'll try for MCSA...I'll go for the security test next week....that's a good point about 'maybe not wanting ms, but to have better understanding of a OS' is the way to be a better security admin. But of course I'm still running from ms and leaning into *nix ....see you around and good luck on that big test at the end of the month, please post back, I do want to delve into that also......
Love the hat Mr. J

/usr

Yeah...I realize that at least a fairly in depth understanding of an OS is essential. I would honestly rather learn Linux, but so many companies use MS products, that I'll need to know those just as much in order to properly secure them.

You want more information on the CEH exam?

Sulblk27

Hi LostInSpace....yes I will appreciate anything concerning the CEH exam, I have been to the website (bookmarked of course )...Thanks in advance

/usr

I'll put a review of what I think so far, in the post I already have started in the Security forum.

/usr

The more I think about it, the more I DON'T want my MCSA.

I don't want to study for multiple tests, to learn software distributed by a vendor I hate. I would much rather learn Linux.

Do you really need an MCSA/MCSE to get a job?

Webmaster

No you don't. It may come in handy, but it's not required for 'every' IT pro.

However, 'hate' is a strong word and IMHO you shouldn't have such emotions towards a product or vendor cause it will limit yourself to a subjective perspective.

Regardless, I'm sure you'll have plenty of oppertunities left without MS certs. And there are plenty of good books and resources about Windows security allowing you to skip most of the administration topics as in MCSA. Still, most companies run MS products, so logically you would benifit from being a MCSA/MCSE (in addition to you sec certs).

Might be a good idea to get at least MCP (i.e. Windows XP professional 70-270 exam).

/usr

I suppose I just don't want to pass up a future job opportunity because I don't have MS certs.

At the same time...I'm only 22 and have almost 2 years of college left, so I do have time left to study for them if I decide to. I can't be sure what the future holds as far as jobs go. I know I want to get into security. Whether that be as an administrator, consulting/pen testing, or in the Information Security part of an organization...I'm not sure what I'll end up in yet.

At some point in my career, I'm quite sure that I will probably pursue my MCSA. I honestly don't want to at the moment, I'm simply not that interested in MS products. I want to study for the LPI or CWNP certifications, but I also want to make choices that will benefit me.

Webmaster

If you don't plan to put those MS certs to use for at least a couple of years, I wouldn't waste any money or time on them now just for the sake of having them. And you're right, you can always decide to go for MS certs later. Although you need to pass multiple exams for MCSA and MCSE, the amount of material per exam is less and most things can be learned by doing. The CWNP exams are mostly theory, which at this point may be more valuable to you to learn instead of 'skills' you won't use for years.

/usr

I posted that I was going to try for the CWNA, but I changed my mind.

In order for me to get into Information Security, most likely I'll have to have some experience as an Admin somewhere. I've yet to see an entry level security position. With that in mind, I'll be more more likely to land a job as an admin with at least my MCSA.

I don't really want to, but I guess I'll just get to work and get these exams out of the way, starting with 70-270.

HackNack

Believe me getting your Microsoft certs SUCKS. I can't wait to get my MCSE 2000 and MCSE 2003 done. I swear that if by book tells me to right click and click properties one more time, I'll scream.

Drakonblayde

yeah, i was thinking about nabbing my mcse after I finished mcsa.... but the thought of sitting anymore microsoft exams just sends me into shudders. I would rather be strapped to a chair and forced to watch Highlander 2 over and over again for all eternity than take another microsoft exam.

Ricka182

Drakonblayde wrote:

yeah, i was thinking about nabbing my mcse after I finished mcsa.... but the thought of sitting anymore microsoft exams just sends me into shudders. I would rather be strapped to a chair and forced to watch Highlander 2 over and over again for all eternity than take another microsoft exam.

H2 wasn't that bad.......now Police Academy 5...that was bad! lol

nightstrm_ut

Drakonblayde wrote:

yeah, i was thinking about nabbing my mcse after I finished mcsa.... but the thought of sitting anymore microsoft exams just sends me into shudders. I would rather be strapped to a chair and forced to watch Highlander 2 over and over again for all eternity than take another microsoft exam.

Yeah, I'm definately going to pursue something else after finishing my next MCP exam for my MCSA. Although, I would eventually like to revisit them and get atleast the Security specialization, I find the material to be some of the most teadious I've ever gone through, and I had quite a few classes during college that I thought were bad. Maybe I'll finally finish up that CCNA I was working on...

Ten9t6

Webmaster wrote:

The CWNP exams are mostly theory, which at this point may be more valuable to you to learn instead of 'skills' you won't use for years.

That is true...but once you pass those 3 theory exams....they should have a butt kicker of a hands on test this year for the Expert.... It sounds pretty hard...