Have done Nework+ now want to do Security+

MrSheen

Hi,

I did my Network+ a couple of years ago and am now interested in doing my Security+. I noticed Security+ covers a lot of topics to Network+. So my question is, is Security+ just a glorified Network+ or does it properly differ from it?
I've learn at lot of this stuff back when I studied at college, but I need a refresh and doing a cert is a great way to refresh.

My current role is a support/implementation specialist for software solutions that run on networked multi function devices, which are all in one units that print scan copy and fax (not the crappy ones you get for home) and our clients and software are becoming more an more security conscious and I thought this certification would be of benefit to me.

Thank you.

DoubleNNs

No. Security+ is very different from the Network+. However, there is a small amount of overlap (think Security of Networks).
But then again, there's a lot of overlap in IT in general.

Darril

Yes, as DoubleNNs mentions, they are different but there is some overlap.

For people taking the Security+ shortly after taking the Network+, it is often easier due to the overlap. When the Network+ knowledge isn't clear, someone studying for Security+ often has to relearn some of the network topics.

As a simple example, in the Network+ exam you need to understand how TCP/IP uses a three-way handshake to establish a connection with SYN, SYN/ACK, and ACK packets.

The Security+ exam expects you to understand some network attack methods including the SYN flood. The SYN flood is easy to understand when you understand the three-way handshake. The attacker floods a system with SYN packets but never completes the handshake with the ACK packets, effectively consuming system resources.

On the other hand, if the handshake process isn't fresh in your mind, the SYN flood concept takes longer to grasp as you have to first remind yourself about the TCP handshake.

Also, while the Network Security domain is 21 percent of the exam and networking topics creep into other domain objectives, the Security+ exam does cover topics outside of networking.

Your statement about "clients and software are becoming more and more security conscious" is a repeating theme I often hear. More and more companies are realizing that security is important and can directly affect their bottom line when security isn't practiced. With that in mind, they value employees with security knowledge, even if it is the basic security knowledge from the Security+ certification.

Sharkbait

From what I've seen, The Security+ cert can open the door to specific opportunities in government positions. Without the cert, you're just another candidate. I'm not entirely sure about the Net+.

-Sharkbait-

Darril

That's absolutely correct, Sharkbait. A Department of Defense directive (DoD 8570.1M) mandates certain certifications for many IT positions defined with different levels, and the Security+ certification meets the requirements for many of these jobs. It's not only for civil service jobs, but it's also for contractors working in IT positions on DoD contracts.