Over the holidays I took the opportunity to put my Security+ training course to use and take the CompTIA Certification Exam. I found the exam rather easy, scoring 895 out of 900. Apparently, I missed just one question concerning the tools used by security specialists. Since I have never actually used any of the tools referenced in the exam I guess it should come as no surprise that I missed a question in that knowledge area.
I have to say that I am a bit concerned, though. I truly didn't study very hard for the exam. Sure I went to a training course provided by Learning Tree International, but my experience there was less than stellar. It makes me wonder just how well I would have done without any preparation at all. Considering my most recent experience in the workforce has been in software engineering and not security the level of effort required on my part is a little disconcerting. Beyond that it makes me wonder just how necessary this certification was for me.
This certification is my very first certification EVER after having worked in the IT industry for over 15 years! I have always been the type of person that feels that certifications are only useful for those who are either new to a career field or for employers to demonstrate to their superiors and or customers that their team is competent. After having taken and earned this certification I feel justified in my previous assumptions. There simply is no substitute for work experience. Education and certification only provides a base understanding of concepts, in my opinion, nothing more.
I had considered going for the CISSP a while back (don't ask me why). But I honestly cannot justify the effort or expense, now more than ever. Perhaps if I am offered a job in which a CISSP is required, maybe then I will revisit this idea. Until then I will simply leave the certification test taking to college graduates and noobs to the workforce.
No comments:
Post a Comment