cissp exam Archives - The Silicon Underground

Security+ vs CISSP

Dave Farquhar — Tue, 27 Sep 2016 11:00:27 +0000

Someone asked me to compare Security+ vs CISSP, particularly the difficulty. I’m glad to oblige. I have both certifications. Let’s start by looking at a couple of hypothetical questions. Don’t expect to see either of these on the test; I’m

The post Security+ vs CISSP appeared first on The Silicon Underground.

How a dictionary attack works

Dave Farquhar — Mon, 19 Sep 2016 11:00:03 +0000

A dictionary attack is a common way to steal a password. Here’s how a dictionary attack works, in layperson’s terms. More importantly, here’s how to beat the attack. A dictionary attack is a much more efficient alternative to brute force

The post How a dictionary attack works appeared first on The Silicon Underground.

SSCP vs CISSP

Dave Farquhar — Thu, 30 Jun 2016 11:00:00 +0000

SSCP and CISSP are both (ISC)² certifications. I get a lot of questions about the two of them, especially about SSCP, as CISSP overshadows it. So let’s look at SSCP vs CISSP. CISSP definitely pays better, but that’s not to

The post SSCP vs CISSP appeared first on The Silicon Underground.

How to become an Info Assurance Analyst

Dave Farquhar — Wed, 11 Feb 2015 11:00:14 +0000

So, CNN/Money ran a story on the best 100 jobs in the United States, based on pay, projected job growth over the next 10 years, and quality of life ratings. And there was my job title, at #9. I think

The post How to become an Info Assurance Analyst appeared first on The Silicon Underground.

CPE opportunity: Exploding the Phone

Dave Farquhar — Sun, 17 Feb 2013 10:46:57 +0000

This week Cnet interviewed Phil Lapsley, the author of Exploding the Phone, a book about the early history of phone phreaking. Phone phreaking is absolutely fair game for the CISSP exam. I couldn’t tell you anymore how many phone phreaking

The post CPE opportunity: Exploding the Phone appeared first on The Silicon Underground.

Is it better to be a consultant or an employee?

Dave Farquhar — Wed, 17 Oct 2012 00:21:59 +0000

I ran into a former supervisor from many years ago at the local Home Depot this evening. We had a pleasant discussion. It reminded me of a question I asked, right around the time he and I last talked. I asked

The post Is it better to be a consultant or an employee? appeared first on The Silicon Underground.

Did I violate my code of ethics?

Dave Farquhar — Mon, 18 Jun 2012 12:01:59 +0000

The CISSP exam (and any other (ISC)² exam) asks a few ethical questions. This question isn’t quite clear-cut enough for the test, I don’t think. But if you’re wondering what the test is like, this actually isn’t a bad thing

The post Did I violate my code of ethics? appeared first on The Silicon Underground.

Quit sniveling about a tech skills gap and train your workers

Dave Farquhar — Wed, 14 Mar 2012 12:24:45 +0000

Infoworld tells employers to quit sniveling about their workers not having enough skills and train them. Sounds good. It worked in the organization where I work. The word came down late last year that we were deficient. We needed another

The post Quit sniveling about a tech skills gap and train your workers appeared first on The Silicon Underground.

Open-source licenses, the CISSP, and the real world

Dave Farquhar — Sat, 04 Feb 2012 13:09:56 +0000

You may have a question about open-source licenses on your CISSP exam. I don’t remember the specifics and wouldn’t be able to repeat them anyway, but I had a question on my exam where knowing the differences was helpful in

The post Open-source licenses, the CISSP, and the real world appeared first on The Silicon Underground.

Time to make a new rule for work

Dave Farquhar — Fri, 03 Feb 2012 13:01:42 +0000

I propose a new rule. I think it’s a very modest and very reasonable proposal. It has two parts. 1. No meeting can last longer than 6 hours (the length of the CISSP exam) 2. Material presented in said meetings

The post Time to make a new rule for work appeared first on The Silicon Underground.