Security Certifications CompTIA
CompTIA offers a wide variety of vendor-neutral computer certifications including a security certification. The CompTIA Security+ certification is considered a foundation-level, general purpose security certification that is valued by many employers. The certification validates competency in system security, network infrastructure, access control and organizational security.
Preparing for Exams
Training classes for CompTIA Security+ can be found at technical training centers, technical colleges, community colleges, online schools and training courseware providers. Methods of training include self-study videos, traditional classrooms, online classes and intensive boot-camp style training which can be two to five full-days, depending on the provider. Prices range from several hundred for a training video to several thousand for a multi-day boot-camp course. CompTIA makes practice exams available online which serve as an additional means of preparation.
Exam Content
The exam includes 100 questions and takes 90 minutes to complete. To become certified, a candidate must earn a 750 on a 100-900 scale. This exam covers the following topics:
- System Security - Types of threats, hardware risks, operating system security, application security, security software.
- Network Infrastructure Ports, protocols, network design elements, security tools, threats and mitigations associated with network devices, transmission media and wireless networking.
- Access Control Best practices, control models, security groups and roles, logical control access methods, authentication and physical access methods.
- Assessments and audits Assessment and monitoring tools, penetration testing vs. vulnerability, scanning, monitoring methodologies, logging procedures and audits of security settings.
- Cryptography Cryptography concepts, hashing concepts, encryption concepts, protocols, public key cryptography, public key and certificate management.
- Organizational Security Redundancy planning, disaster recovery procedures, incident response procedures, legislation and organizational policies, environmental controls and risks of social engineering.
Taking Exams
Exams must be taken at a Pearson Vue or Prometric testing site that are available worldwide. Some training centers that provide the CompTIA training also give exams. In the case of boot-camps, it may be possible to take the exam at the end of the training. To find a location, go to the Pearson Vue test center location finder or the Prometric test taker webpage.
Maintaining Certifications
CompTIA certifications are lifetime certifications and do not have any maintenance requirements. However, their exams are updated periodically to stay current with technology changes and some employers require their employees to take the updated exams. Others may choose to take the updated exams to ensure their knowledge is staying current with technology changes. CompTIA also offers bridge exams which cover only the new objectives of the exam.
Who should get CompTIA Security+ Certification?
This exam is appropriate for many networking professionals, even if security is not their primary role. CompTIA recommends that a person have two years experience in networking in a role such as network analyst with a focus on security before taking this exam. They also recommend obtaining the CompTIA Network+ certification prior to taking the Security+ exam.
Evaluating Training Options
For the CompTIA Security+ certification, there are many vendors and training options to choose from. Below are a few of the factors to be considered when choosing training:
- Training method - Given the many options, it makes sense to determine the training method that best fits the persons learning style and lifestyle.
- Exam Guarantee Some training centers will allow a student to re-take the course for free if they fail the exam. Others will pay for a person to re-take the exam.
- Whether the exam is included Sometimes the exam can be taken as part of the training course, as a convenience to the students.
About CompTIA
CompTIA is a non-profit trade association of Information Technology professionals. They offer numerous certifications in areas such as networks, servers, Linux, radio frequency identification and project management. They are now also offering some new exams for technology novices who want to increase their basic knowledge of technology.
Online Course Finder
Find the path to your
education in 3 easy steps.