Tech blog
In July 2021, I took the Microsoft Security, Compliance, and Identity Fundamentals (SC-900) exam.NB The exam content has changed since then, so some of the specifics in this blog post might be out of date. According to the exam description:“Candidates should be familiar with Microsoft Azure and Microsoft 365 and want to understand how Microsoft …
Continue reading “Microsoft Security, Compliance, and Identity Fundamentals (SC-900)”
In May 2021, I took the Microsoft Azure Fundamentals (AZ-900) exam. This is similar to Microsoft 365 Fundamentals (MS-900), i.e. it’s asking about what the technology does rather than how you use it. However, I thought this was a better exam than MS-900, i.e. it was more relevant to what you actually need to know …
Overview In November 2016, Cisco introduced “CCNA CyberOps”. This consisted of 2 exams: At this point, there were 10 associate level certifications: 9 versions of CCNA (Cisco Certified Network Associate), and also CCDA (Cisco Certified Design Associate). In February 2020, most of the associate exams were merged together into the new CCNA (200-301). The only …
In May 2020, I took CompTIA’s Server+ exam. This certification is “good for life”, i.e. it’s not part of the CE program and I don’t have to recertify. As with all of CompTIA’s exams, there are no formal prerequisites, but they advise you to have A+ first (or at least know the material that’s covered …
In April 2020, I took the eJPT exam from eLearnSecurity. As the “Junior” part of the name suggests, this is an entry level exam, and I think it acts as a good stepping stone towards the eCPPT or the OSCP. All of eLearnSecurity’s certifications are good for life, as opposed to Cisco/CompTIA certifications which have …
Continue reading “eLearnSecurity Junior Penetration Tester (eJPT)”
I’m currently preparing for the OSCP exam. As part of that, I’ve spent a lot of time on OffSec’s Discord server, where I’ve helped other students and been made a “Community Companion”. I noticed that a lot of people got stuck on a particular exercise (section 11.2.8, question 3) so I made a video walkthrough: …
Today is the 10th anniversary of World IPv6 Launch. IPv6 has been around since the 1990s, but some organisations were hesitant about using it for their websites. So, World IPv6 Day (in June 2011) was an opportunity for these organisations to enable IPv6 for 24 hours. That way, if anything broke then it would probably …
When you try to delete a mailbox database from Exchange, you might see an error like this: At first glance, that’s not very user-friendly! I’ve seen some people get stuck at this stage and ask for help. However, the error message does actually tell you everything you need to know.
In March 2020, I took CompTIA’s CySA+ (Cybersecurity Analyst) exam. Along with PenTest+, this bridges the gap between Security+ and CASP. In simple terms, PenTest+ is about “red team” activities (attack) whereas CySA+ is about “blue team” activities (defence). This certification was launched in 2017 as CSA+, but it was rebranded in January 2018 because …
Palo Alto Networks make security products. In particular, they sell firewalls (physical and virtual), and their Panorama software will let you manage multiple firewalls centrally (e.g. for branch offices). Their certification program has 3 tiers: Entry level Administrator Engineer Palo Alto Networks offer free training for all of these, although you have to pay for …
Continue reading “Palo Alto Networks Certified Cybersecurity Associate (PCCSA)”