₦airaland Forum

As seen online ...

Cloud security is a growing field, lots of opportunities out there

But how do you break in without experience?

If AWS is the cloud provider you're learning, do this:

1️⃣ Create a free tier account.
2️⃣ Visit the AWS Well-Architected Labs website (link ��)
3️⃣ Complete the labs. While you are completing these free labs, document what you struggled with, what was easy, what did you have to Google.
4️⃣ Write a post, blog, or record a video outlining what you learned.

These labs are free and are based on real world cloud scenarios.

Instead of complaining about ridiculous experience requirements, take matters into your own hands. Go get your experience, get your hands dirty and share what you've learned.

Completing projects publicly that show your value will help you skip the annoying and unrealistic job descriptions.

This is a concept called completing a "Value Validation Project." Proving your value to potential employers is a great way to show you're serious about the field and also a great way to imporve your skills.

Own your journey into cloud security. Being interested isn't enough, put the work in and watch the results follow.

#TMC #cloudsecurity �

Free cloud auditing training from:

https://www.aws.training/Details/eLearning?id=41556

Free Training
In preparation for the CyberArk Trustee certification, you must take the free “Introduction to CyberArk Privileged Access Security” course available online.

https://training.cyberark.com/exam/level-1-Trustee

This is M. Atef’s class that happened last week Saturday on ISO 27001 implementation:


https://www.youtube.com/watch?v=6RJjxc1VbEk

CCAK Study Guide Available Now

We are also excited to share that the Certificate of Cloud Auditing Knowledge (CCAK) Study Guide is now available for purchase. The study guide is a valuable resource for IT, business professionals looking to qualify for the CCAK exam.

The Certificate of Cloud Auditing Knowledge Study Guide is available for purchase at a cost of $59 for members and $70 for non-members.

https://cloudsecurityalliance.org/blog/2021/03/02/ccak-frequently-asked-questions/

https://cloudsecurityalliance.org/blog/2021/02/23/study-guide-for-certificate-of-cloud-auditing-knowledge-ccak-now-available/

Luckybelt:
Does annyone have CGEIT materials

Free CGEIT q & a for a limited time only:

https://www.udemy.com/course/isaca-cgeit-certification-practice-test-ib/?ranMID=39197&ranEAID=F20NfnFjLYg&ranSiteID=F20NfnFjLYg-XvUBbrLJuHDy12rGalkadw&LSNPUBID=F20NfnFjLYg&utm_source=aff-campaign&utm_medium=udemyads&couponCode=PRACTICE

Yet to take the AWS security.

How did it go with CCSP & CISSP?

FREE TRAINING month of February - Cybrary, select premium courses (see below)

For those of you struggling with Cryptology for the Sec+, definitely check out the CISSP course (module 4). The explanations for crypto are awesome!

**Cybrary** is making some of their most popular premium courses available for **free all month long**! **Through February 28th**, accelerate your professional development growth with any (or all!) of the following **nine courses**:

* [CISSP](https://go.cybrary.it/n0Ba0Ri03kDV0IS0Y700Y62)
* [CCSP](https://go.cybrary.it/c0203kaB0VDS07YIj0YS600)
* [CISO] ...


Woo-hoo -- hard to go wrong with free training!!! Enjoy!!!

(Login to Cybrary, click on link above, you should see "Enroll" button, then you can watch all of the videos)

https://www.isaca.org/credentialing/certified-data-privacy-solutions-engineer/cdpse-beta

From Isaca,

“ ISACA certification exam development is done in consultation with industry experts and the IT community. Our beta exams help us gather and analyze valuable feedback from candidates across the world to ensure that the final grades of the beta exams, as well as the final versions of the exams, reflect the skills of the candidates and the quality of ISACA certification exams.”

Jintata:
Free Cyberark training:

https://training.cyberark.com/course/introduction-to-cyberark-privileged-access-security

A privileged account is a user account that has more privileges than ordinary users. Privileged accounts might, for example, be able to install or remove software, upgrade the operating system, or modify system or application configurations.

Free Cyberark training:

https://training.cyberark.com/course/introduction-to-cyberark-privileged-access-security

https://enroll.isc2.org/product?catalog=ISC2-CISSP-RVW-PUB


Online Training
Official (ISC)² CISSP® Review

Happy new year to all. Kelly Handerhan's CISSP videos are free now in

https://app.cybrary.it/immersive till 31st january.

It's a very good course ..,

https://www.linkedin.com/posts/iapp---international-association-of-privacy-professionals_linkedin-live-job-searching-during-a-pandemic-activity-6732698545234690048-tByI

Webinar on privacy currently on LinkedIn.

Very good webinar on getting a job in the current climate.

The Complete Splunk Enterprise Certified Admin Course 2020
Get Hands-on with Splunk 8 and Prepare to Pass the Splunk Enterprise Certified Admin Exam

19 sections • 79 lectures • 3h 57m total length


FREE for 1 day

Rating: 4.4 (790 ratings)
https://www.udemy.com/course/bestsplunkcourse/?couponCode=GREATREFRESH

Grab it�

VickyRotex:
Hope everyone is doing well!

Anyone interested in joining Microsoft Ignite Cloud Skills Challenge? Runs from ...

If you'd also like to join the Challenge event that started on 22nd, join here. https://myignite.microsoft.com/
24th is the last day for the event. (It's a shorter session)

Please let me know if you have any questions. All the best!

Thanks so much for these ...

Cissp overview training from isc2 is still free now:

https://enroll.isc2.org/product?catalog=ISC2-CISSP-RVW-PUB

Came across this online now.
Might be useful to some.

Goodluck...

Gift From Myside, Must Be Used Before 14th September, Enjoy Best of Luck 1st Apply 1st

*Juniper Associate Pearson 100% Discount Vouchers*

*Junos*

JNOL344C662F
JNOL30745B93
JNOL34835065
JNOL344E004C
JNOL2E405395
JNOL473D2F16
JNOL30833278
JNOL309E1701
JNOL47484284
JNOL60143310
JNOL4562719B
JNOL473D2F16
JNOL28583171
JNOL286A7B94
JNOL2862948D
JNOL2E9A945E

*Devops*

JNDO68324810
JNDO29324599
JNDO29029D38

*Design*

JNDA30608962
JNDA30017C1E

*Cloud*

JNCL163E906A
JNCL78547896
JNCL15650C4B

*Security*

JNSC9E202713
JNSC9D733A32
JNSC300D8539

Live webcast: (ISC)² Info Session: CCSP - The Industry’s Premier Cloud Security Certification

https://www.isc2.org/News-and-Events/Webinars/APAC-Webinars

Time: 11:30 IST today

In case anybody is interested

Harvard university is offering 67 courses for free during this pandemic. You may share the link with anyone who wants to spend their time learning something new.


https://online-learning.harvard.edu/catalog?keywords=&paid%5B1%5D=1&max_price=&start_date_range%5Bmin%5D%5Bdate%5D=&start_date_range%5Bmax%5D%5Bdate%5D=

https://www.businessnewsdaily.com/9661-cybersecurity-certifications.html

5 Great 'Starter' Cybersecurity Certifications

FEGEITOK:
How's everyone doing?

This thread has been silent for a while.

Hope this post jerks it to life lol.

I got a remote cyber security job interview on Monday.

I need to clinch this job to hedge against the continuous fall of the Naira.


How do I ace this interview?

Thanks in advance.

So far I have been using LinkedIn Interview preparation videos and sample responses.

Getting an interview means you’re halfway there. Good luck.

... 12 points for Cissp preparation;
and hopefully it will help you in outlining your strategy as well.



https://www./how-i-passed-cissp-first-attempt-preparation-strategy-mehta-cism/

Google is launching Career Certificates. It will cost $300 only, you can complete in 6 months and Google will consider it equivalent to 4 years Bachelors degree when you will apply for a job at Google - Data Analyst, Project Manager, UX Designer, IT Support Specialist and Automation to name a few certificates -

https://grow.google/certificates/

Luckybelt:
I need a study group for cissp

Checkout Telegram

Dipsaint:
Infosec instuite is offering over 700 courses for free and you get the chance to lay your hands on practical exercises

https://www.infosecinstitute.com/skills/

I checked this out; it looks like a very good offer.
Thanks for putting this here ��

Splunk is providing free course for beginners.

https://www.splunk.com/en_us/training/free-courses/splunk-infastructure-overview.html

https://www.splunk.com/en_us/training/free-courses/user-behavior-analytics.html

https://www.splunk.com/en_us/training/free-courses/splunk-fundamentals-1.html

Below is the link to start the training and download the certificate

https://education.splunk.com/user/learning/enrollments

All the best...

Computer Networks Security from Scratch to Advanced Computer Networks Security Technologies and Tools for Network Admins and Cyber Security Officers


https://www.udemy.com/course/computer-networks-security-from-scratch-to-advnaced/?couponCode=3A56A07804F020EB50D5

I recently came across the information below from interactions here. Many thanks to the saint.

IBM Cybersecurity Analyst Professional Certificate

Launch your career in Cybersecurity.

The IBM Cybersecurity Analyst Professional Certificate is your entry point into a new career in #cybersecurity.


https://www.google.com/url?q=https://www.coursera.org/professional-certificates/ibm-cybersecurity-analyst&sa=U&ved=2ahUKEwi_w4L4lsfqAhXF-6QKHZueAvkQFjAAegQIBhAB&usg=AOvVaw2IR7sGvQi-Q32UJYo9oUaD

You need a student email to access it for free.

Coursera courses are presently free for college and university students

Understanding Attack Methods

– Eavesdropping: traditional method of spying with the intent to gather information

– Passive Attacks are characterized by techniques of observation

– Host Traffic Analysis: used to identify systems of particular interest

– Network Analysis: the computer traffic across the network can be analyzed to create a map of the hosts and routers

– Phising: a social engineering technique utilizes fake emails sent to unsuspecting victims, which contain a link to the criminal’s counterfeit website.

– Spear Phising: this attack targets a specific server, user, database, or network device.

– Dumpster Diving: attackers will frequently resort to rummaging through the trash for discarded information

– Malware: malicious software which exploits a known vulnerability or creates its own.

– Trojan Horse: malicious programs frequently use the Trojan horse concept to deliver viruses, worms, logic bombs, and other root kits through downloaded files.

– Root Kit: attackers embed a root kit into downloadable software. This malicious software subverts security settings by linking itself directly into the kernel process, system memory, address registers, and swap space.

– Maintenace Accounts: may be part of the default settings or created for system support

– Robot Networks: Malware programs such as Trojan horses can built bot-net composed of computers owned by unsuspecting users.

– SQL Injection: the entire computing world depends on information kept in a database. Input validation is required to prevent unauthorized access to databases.

– Cross-Site Scripting (XSS): a programming technique that enables one website, such as a shopping cart, to drive another website.

– Zero-Day Attack: refers to any attack that has not been seen before

– War Dialing: uses an automated modern-dialing utility to launch a brute force attack against a list of phone numbers.

– Source Routing: designed to ignore the configuration of the network routers and follow the instructions designated by the sender.

– Packet Replay: Packets are retransmitted (replayed) within a short time window to trick a computer system into believing that the sender is a legitimate user.

Dipsaint:
Do I need a degree in Computer Science or Cyber Security to pursue a career in Cybersecurity?

Presently, I'm an Agricultural Engineering student of the University of Ibadan. I have full interest in Cybersecurity and I've spent almost all my time during this lockdown to develop Cybersecurity skills and acquire some certificates.

I'm planning to take the ComptiaSecurity+ exam next year.

Thank you.

My response is probably going to be controversial; but here goes ...

1. You don’t need a degree in Comp Sci. or Cybersecurity to pursue a career in Cybersecurity.

2. CompTIA Sec+ is a good place to start. CompTIA Sec+ assumes you have some of the knowledge contained in the CompTIA A+ & N+ exams.

3. Other starter (ish) Cybersecurity certs to consider included CEH, Cisco CCNA, Isc2 SSCP etc...

Special mention ought to be made for the Isaca’s CSX-P - Cybersecurity Practitioner Certification. It is probably one of the most hands-on certs out there. Any serious starter ought to give this a close look.

4. The cissp is the Cert that makes the most sense in Cybersecurity today. An old saying goes, “if you’re going to eat a toad, eat a fat & juicy one.”

A lot depends on you but IMHO if u start studying for the cissp today and it takes u 1, 2 or 3 years to pass, then you’re closer to your dream than any other route I can think of.

Passing the cissp exam would make you an associate of the isc2, until u can prove 4 to 5 years active Cybersecurity experience to be a full certified cissp. Even with the associate designation you will be miles ahead of the “also rans”.

The cissp is nice to have. The path & knowledge you go through to be a cissp would also probably give you an idea of which area of Cybersecurity u might want to eventually specialize in.

Do note that cissp is a risk exam.

Another growth area is cloud. The certs to look at here include AWS & CCSP & CCSK ...

A special shout out to OSCP, data analytics, SIEMs, python programming, SOCs, etc ... These are other paths to consider.

Please put your comments below or you can send me a dm or email if u have futher questions ...