06-25-2017, 09:26 AM
I sat the exam yesterday and passed with a 460 out of 500. Overall, i'm pretty happy with that score for no study. The test itself wasn't extremely difficult if you have a general knowledge of IT Security concepts. The test didn't go very in depth with the questions which made it easy to conduct the process of elimination of the ones I was unsure about. I did spot one question on the exam related to threats, vulnerabilities, risk and exploits that was obviously incorrect. This was very annoying as they don't give you the option to select correct multiple choice answer.... If you sit the exam you'll see what I mean banghead
If you already have Security+, I'd instruct you to go ahead and take the exam. I choked up on some questions related to SDLC as i'm not very strong in that area. Things to know: ICMP, Kerberos, IPsec, nmap, sniffers, vulnerability scanners, Cross-Site Scripting, DoS, honeypots, botnets, zombies, CIA Triad, digital certificates, CA's, hashing, Symmetric and Asymmetric encryption, DR recovery sites, SDLC process, etc.
According to the DSST website, "This exam was updated June 8, 2017 and includes new content and content outlines reviewed by the American Council on Education (ACE)."
I. Application & Systems Security â 15%
II. Authentication, Authorization, & Access Controls â 12%
III. Policies, Compliance, & Governance â 12%
IV. Operational Security â 10%
V. Network Security â 20%
VI. Vulnerability Management â 15%
VII. Physical & Environmental Security â 6%
VIII. Disaster Recovery & Business Continuity â 10%
If you already have Security+, I'd instruct you to go ahead and take the exam. I choked up on some questions related to SDLC as i'm not very strong in that area. Things to know: ICMP, Kerberos, IPsec, nmap, sniffers, vulnerability scanners, Cross-Site Scripting, DoS, honeypots, botnets, zombies, CIA Triad, digital certificates, CA's, hashing, Symmetric and Asymmetric encryption, DR recovery sites, SDLC process, etc.
According to the DSST website, "This exam was updated June 8, 2017 and includes new content and content outlines reviewed by the American Council on Education (ACE)."
I. Application & Systems Security â 15%
II. Authentication, Authorization, & Access Controls â 12%
III. Policies, Compliance, & Governance â 12%
IV. Operational Security â 10%
V. Network Security â 20%
VI. Vulnerability Management â 15%
VII. Physical & Environmental Security â 6%
VIII. Disaster Recovery & Business Continuity â 10%