Great Review Guide for Studying for the Exam!

)

This is a great study guide for reviewing before taking the CompTIA Security+ exam.

I say a review because it assumes you know certain things first. For example, it assumes you know about networking, computers, and security in general. This book is not for the novice who doesn't know anything about PC security or networking and hopes to pass the exam.

The tips about what you should pay exact attention to are very valuable. There was a discussion early on in the book about security basics that I was just breezing through and the tip suggested that I could expect questions on the test regarding this because it was fundamental to security. Because I thought that was a "given" I didn't expect that there would be questions on the test about it. So the tips are very helpful.

In general, the book is a good study guide and review source for what you already know. The CD with the test review on it was also helpful. I shared it with someone who had actually tested and didn't pass and he said he wished he'd had that to study with before he took the test!

Highly recommended!

Debbie Mahler

Provides everything needed for the right candidate

www.sysedco.com" (Marysville, OH) -
  

According to CompTIA's website, while not a prerequisite, they recommend that an individual sitting the Security+ exam have "at least two years of on-the-job technical networking experience, with an emphasis on security." They further recommend having the Network+ certification. My review of this book is based on an assumption that the individual using this book either meets these recommendations or, through some other means, has equivalent knowledge and experience.

As the author of an eLearning program that helps prepare people for the Security+ exam, I have considered the Security+ 2008 objectives more than most. This book covers everything you need to know to pass the Security+ exam - assuming you have the fundamentals of networking down. As an example, on page 15 (very early in the book) the authors assume you know what a port is when they say, "A network administrator can, for instance, move a service from its default port to a different port..." There is no explanation as to what a "port" is and, according to CompTIA's recommendations, there need not be.

I've given this as a simple example, but the book is filled with assumptions. It's probably a good thing. The book is nearly 700 pages now; imagine how large it would be if all of the knowledge were provided in this single resource. If you don't meet the recommendations that CompTIA suggests, I would encourage you to get this book along with your choice of a Network+ study guide. Then, even if you don't wish to acquire the Network+ certification, you will have the knowledge you need for the assumed information in this book.

I particularly liked the organization of this book. Part I deals with the theory of security (principles, organizational requirements, legal issues, etc.) and provides a foundation for the rest of the book. Part II deals with confidentiality in quite a bit more depth than is required by the Security+ exam. The coverage is closer to that needed for the CISSP exam. The next two parts, Security in the Infrastructure and Security in Transmission address the security needs for network access, data access and data transfer. The final part, excluding the Appendices, is Part V; here, issues related to operational and administrative security are addressed.

Overall, the information is presented in a sequence that makes it both digestible and memorable. I have to say that, in my opinion, this is the best Security+ book to come along yet.