SSCP Archives

Home » SSCP

Can I use a CISSP book to study for SSCP?

Dave Farquhar security November 27, 2016August 1, 2017cissp, malicious code, SSCP

Can I use a CISSP book to study for SSCP? That’s a good question, and a good idea, but I don’t recommend it anymore.

David Farquhar is a computer security professional, entrepreneur, and author. He started his career as a part-time computer technician in 1994, worked his way up to system administrator by 1997, and has specialized in vulnerability management since 2013. He invests in real estate on the side and his hobbies include O gauge trains, baseball cards, and retro computers and video games. A University of Missouri graduate, he holds CISSP and Security+ certifications. He lives in St. Louis with his family.

dfarq.homeip.net

SSCP vs CISSP

Dave Farquhar security June 30, 2016August 11, 2018certifications, cissp, cissp exam, isc, SSCP

SSCP and CISSP are both (ISC)² certifications. I get a lot of questions about the two of them, especially about SSCP, as CISSP overshadows it. So let’s look at SSCP vs CISSP.

CISSP definitely pays better, but that’s not to say SSCP doesn’t have merit.

Dave Farquhar

dfarq.homeip.net

Questions from the logs

Dave Farquhar Uncategorized January 6, 2013November 27, 2016cissp, lionel, Lionel Fastrack, lionel train, malicious code, SSCP

If one person uses a password, another will. That’s a popular hacking theory. If that’s true, then chances are if one person asks a question, another will. So here are three short questions (one completely unrelated to the others) I found in my logs over the weekend, and their answers.

Dave Farquhar

dfarq.homeip.net

One road to the CISSP: Do SSCP first

Dave Farquhar security June 10, 2012November 26, 2015CBK, CERT, cissp, isc, LinkedIn, OSI, osi model, SSCP

As my crazy week wound down, I had a number of visitors, including someone who’s been on the fence about taking the CISSP. She wanted some advice. The (ISC)² Code of Ethics says to give generously of such things when asked, so we talked for about 30 minutes. Read more

Dave Farquhar

dfarq.homeip.net

A cloud computing-related Security+ question

Dave Farquhar security February 29, 2012August 12, 2018CISM, cissp, datacenter, DBA, SSCP

Someone tossed a Security+ study question my way this week. This is an example of Security+ trying to be CISSP Lite, but it’s still a valid question–probably for either test, and for SSCP and CISM too.

A small not-for-profit organization needs to invest in a new expensive database. There is no budget for additional servers or personnel. Which of the following solutions would allow it to save money by avoiding hiring additional personnel and minimize the footprint in their current datacenter?
A. Linux
B. Software as a Service (SaaS)
C. Infrastructure as a Service (IaaS)
D. Platform as a Service (PaaS)

Let’s take it one at a time.

Dave Farquhar

dfarq.homeip.net