2.2.5 Lab - Becoming A Defender
2.2.5 Lab - Becoming A Defender
2.2.5 Lab - Becoming A Defender
Objectives
Research and analyze what it takes to become a network defender.
Part 1: Conduct search of Certifications.
Part 2: Investigate positions available within cybersecurity
Background / Scenario
In our technology-centric world, as the world gets more connected, it also gets less safe. Cybersecurity is one
of the fastest growing and most in-demand professions. Individuals in this field perform a wide variety of jobs
including, but not limited to, consultation, investigation, and program management services to mitigate risks
from both internal and external sources. Cybersecurity professionals are required to evaluate, design and
implement security plans, conduct in-depth fraud investigation, perform security research and risk
assessment, and propose solutions to potential security breaches.
Individuals with good security skills have a great earning potential. To be considered for one of these high
paying jobs, it is very important to have the proper qualifications. Because of this, it is important to consider
the industry certifications available for this career path. There are many certifications to choose from.
Selecting the right certification(s) for you requires careful consideration.
Note: You can use the web browser in the virtual machine that was installed in a previous lab to research
security-related issues. By using the virtual machine, you may prevent malware from being installed on your
computer.
Required Resources
PC or mobile device with internet access and virtual machine (optional).
Instructions
2018 -2020Cisco and/or its affiliates. All rights reserved. Cisco Public Page 1 of 3 www.netacad.com
Lab - Becoming a Defender
b. Pick three certifications from the list above and provide more detail about the certification requirements
and knowledge gained i.e.: vendor specific or neutral, number of exams to gain certification, exam
requirements, topics covered etc.
Answer:
1. Offensive Security Certified Professional (OSCP) - There are no formal requirements to
take the exam. Offensive Security recommends familiarity with networking, Linux, Bash scripting, Perl or
Python, as well as completion of the Penetration Testing with Kali course.
2.. CompTIA Advanced Security Practitioner (CASP+) - The exam covers advanced topics like
enterprise security domain, risk analysis, software vulnerability, securing cloud and virtualization technologies,
and cryptographic techniques. There’s not a formal prerequisite for taking the CASP+ exam. CompTIA
recommends it only for experienced cybersecurity professionals with at least ten years of IT administration
experience (including five years of broad hands-on experience with security).
3. Certified Information Security Manager (CISM) - To take the CISM exam, you need at least
five years of experience in information security management. Satisfy up to two years of this requirement with
general information security experience. You can also waive one or two years with another certification in good
standing or a graduate degree in an information security-related field.
2018 - 2020Cisco and/or its affiliates. All rights reserved. Cisco Public Page 2 of 3 www.netacad.com
Lab - Becoming a Defender
e. Do any of the certifications match the ones that you found in Step 1a?
Answer: No
Type your answers here.
f. Investigate online resources that allow you to legally test your hacking skills. These tools allow a novice
with limited cyber security experience to sharpen their penetration testing skills. One such site is Google
Gruyere (Web Application Exploits and Defenses). What kinds of challenges can you find?
HackThisSite
Root Me
OverTheWire
HackThis!!
WebGoat
Hellbound Hackers
2018 - 2020Cisco and/or its affiliates. All rights reserved. Cisco Public Page 3 of 3 www.netacad.com