YFZblu's CCNA: Security journey (640 554)

YFZblu

Back on the horse.

Reading chapter 1 on network security concepts, which includes common security threats which I was weak on. I will also run through Layer 2 security tonight.

YFZblu

Couldn't get to layer 2 security, I'll take care of that first thing in the AM.

phoeneous

YFZblu wrote: »

Back on the horse.

Reading chapter 1 on network security concepts, which includes common security threats which I was weak on. I will also run through Layer 2 security tonight.

How much lab time are you getting in?

Mike-Mike

I pushed my test back until Tuesday, had originally scheduled it for today

YFZblu

Mike-Mike wrote: »

I pushed my test back until Tuesday, had originally scheduled it for today

I'm going to re-take Monday. I actually wanted to re-take today, but apparently Vue doesn't permit same-day exam scheduling, and my testing centers don't operate on the weekends.

YFZblu

In security-related news, I was contacted by HR within my organization today for an interview on Monday. The position is Security Analyst I. I'm hoping to pass CCNA: Sec before the interview on Monday, so I can let them know I finished.

The Sec Analyst position would also allow me to move back to Phoenix, which I consider home.

Roguetadhg

Lucky! Good luck man!

Mike-Mike

YFZblu wrote: »

In security-related news, I was contacted by HR within my organization today for an interview on Monday. The position is Security Analyst I. I'm hoping to pass CCNA: Sec before the interview on Monday, so I can let them know I finished.

The Sec Analyst position would also allow me to move back to Phoenix, which I consider home.

good luck! sounds awesome

YFZblu

Phew! I passed this morning, with a score of 876.

I performed NO better on Layer 2 security (67%), and scored the same on common security threats (50%). The difference this time is I scored a 100% on router security and ACL's. I also scored highly in a couple of other areas; but my exam results are in the car, out of reach of my lazy arms and legs. I'll post the officials later. Either way I'll take it!

This is just in time for the Security Analyst interview I have in 39 minutes, so it worked out really well. To those who put up with my rambling for the last four months, I apologize if I have driven you to the brink of insanity!

marco71

Congrats!
How was the 2nd test compared to first one?

YFZblu

Thanks!

Very similar, I don't think the pool of questions is huge.

YFZblu

On another note, I absolutely slaughtered the Security Analyst position interview

Roguetadhg

Congrats on both fronts!

When will you be hearing back from them?

MAC_Addy

YFZblu wrote: »

On another note, I absolutely slaughtered the Security Analyst position interview

Congrats on the pass and congrats on killin' the interview! What were you doing for labs on exam prep?

YFZblu

Thanks!

I have an 871 Router which is fully compatible with CCP, so I was poking around CCP on the 871, purchased an ASA 5505 for ASA stuff, and used packet tracer for Zone-based firewall work.

Chitownjedi

Congrats on the pass... hopefully they recognize you for the position! Good Job dude!

MrBrian

Congrats on your pass and job offer YFZblu!! Also, thanks for sharing your experiences with us on obtaining the CCNA Security.

Diggs

Congrats on the pass YFZblue!

Have enjoyed lurking your thread

YFZblu

Thanks all!

Up next is GSEC, and because there is a hefty amount of Linux security I have my LPIC-1 book in hand already. I hope to finish both certs within the next few months.

marco71

YFZblu wrote: »

I have an 871 Router which is fully compatible with CCP, so I was poking around CCP on the 871, purchased an ASA 5505 for ASA stuff, and used packet tracer for Zone-based firewall work.

I'm jealous, because I dont have a 5505 and I used only GNS3 for most of the labs ... have an 831 router but it is not 100% compatible with CCP and does not support IPS (but was fine for most of CCP tasks); otherwise, I used GNS3 for ASA stuff (although I was able to emulate only ASA 8.0x, not 8.2x or 8.4x) and did not succeeded to emulate IPS in time, until exam (spent a little bit more than a month for study - read and practice)... for Layer-2 stuff, I think Packet Tracer is sufficient.

IMHO, all R&S hardware stuff are not really necessary (only recommended) for CCNA/CCNA:S ... but mandatory for higher Cisco certs

YFZblu

marco71 wrote: »

IMHO, all R&S hardware stuff are not really necessary (only recommended) for CCNA/CCNA:S ... but mandatory for higher Cisco certs

Agreed - If i could go back, I would probably save my $300 and not purchase the ASA - But I'm sure I'll find some projects for it on my home lab.

zrockstar

Hey Blu, haven't check in with you in a while. Just wanted to say congrats on the pass and the job! I guess I should have stuck it out when I started with you a few month ago, but I have been working on a few things and am waiting to hear back on a job myself

thedrama

YFZblu wrote: »

Hey all--

After achieving my CCNA, I decided to specialize with the CCNA Sec track. I've never done anything like this before, but I'm going to post daily to this thread to keep a running log of my experiences; good and bad. I don't have much to offer now in terms of security, just my security+. So as you'll see in my later posts I'm quite green to IT security besides basic terminology and concepts.

So here is my plan of attack: I'm probably going to read the book the first time without taking many notes or lab'ing much at all. I strictly want to gain a high-level understanding of the concepts. Hopefully by the time I complete the book the first time (~3 weeks) there will be more resources available for the new exam such as CBT Nuggets and/or Train Signal. Once those video tutorials are released, I will then re-read the book in conjunction with the video tutorials, to gain a more granular understanding of the topics. Hopefully by this time I will also have my ASA 5505 in-hand for some serious lab study.

All in all, I'd like to do this in under three months - For someone with just a CCNA and no practical experience in security and no paid experience in networking, I think this is an aggressive goal. I'm currently going to school full time and working full time + on call, so I can't spend 6 hours a night on this like I want to After the enormous amount of time I spent on the CCNA, I promised my wife I'd back off a little as well.

I also hope this thread can serve as a hub for others to post their experiences to during their CCNA Sec journey. Good luck to all!

Edit: The book I'm reading is: 640-554 CCNA Security, Official Cert Guide. Authors are Keith Barker and Scott Morris.

Whats the allure of this thread? plenty of replies.

spiderjericho

Blu, congrats on the pass and the new position. Good luck to you in LPIC and GSEC.

SecurityThroughObscurity

Why do not you continue to achieve CCNP Sec?
CCNA Sec is a kind of superficial.

YFZblu

^ I sort of need to complete GSEC next because my free exam challenge expires in mid-March. Otherwise it will cost me $1,000 I believe.

I recently applied for a Security Analyst position with my current organization, and received a call back from HR. HR apologized for the delay, said they're really behind, but preparing an offer for me. I was told what shift I would work, asked how quickly I could get to Phoenix (where the company is based), etc. I have not received an official offer or signed any type of agreement, but it is seemingly a done deal based on that conversation. I am hoping for another call today to get everything on paper. If/when I get the job, I'll spend some time in the security space and go for CCNP: Sec at that time.

YFZblu

spiderjericho wrote: »

Blu, congrats on the pass and the new position. Good luck to you in LPIC and GSEC.

Thanks!

spiderjericho

Blu, did you go through a GSEC course? And I like Phoenix (as long as you can get used to the heat). The Housing market isn't too bad there. But the state taxes are ridiculous. And I'd agree, CCNA Security doesn't have enough meat on its bones when compared to Voice. But it's simply a way to give the CCNP S candidate fundamentals in several of the topics before delving deeply (except for the IPS).

YFZblu

I actually grew up in Phoenix. I moved because I really needed out of the helpdesk and couldn't get any love locally in Arizona at the time. Of course, the only credentials I had to my name were the CompTIA's and helpdesk experience, so I took a promotion in Grand Rapids with my current company just to escape the desk. It's a lot of desktop support with some really nice perks. But I still want more. My wife and I sort of hate it here, and the snow will start sticking soon - So leaving to go back home will be excellent.

I did attend the GSEC bootcamp in person - I applied to the Work Study program sort of on a whim, and got accepted. It was a really great experience.

Regarding ccna: sec, I think the most disappointing thing was the amount of material NOT covered on the exam. Without breaking NDA, all I can really say is the new ccna sec exam touched on a few things, but some of what I believe to be major points were not addressed on the exam itself whatsoever. So I am looking forward to CCNP: Sec eventually.

YFZblu

For those with knowledge of the CCNP: Sec material, would it be better to complete the CCNP prior to the CCNP: Sec, for completeness? Or should I be able to make the transition from CCNA Sec to CCNP Sec without the need to complete CCNP?