Cisco Security Professionals in the Real World

In the next section, we describe an ideal Cisco Security Professional candidate, knowing full well that only a few actual candidates meet this ideal. In fact, our description of that ideal candidate might seem downright scary. But take heart; although the requirements to obtain a Cisco security certification might seem formidable, it is by no means impossible to meet. However, you should be keenly aware that it does take time, requires some expense, and calls for substantial effort.

You can get all the real-world motivation you need from knowing that many others have gone before you. You can follow in their footsteps. If you're willing to tackle the process seriously and do what it takes to gain the necessary experience and knowledge, you can take ”and pass ”the Cisco certification tests. In fact, the Exam Crams are designed to make it as easy as possible for you to prepare for these exams, but prepare you must!

The same, of course, is true for other Cisco certifications, including the following:

• You must be a CCNA to get Cisco security certified.

• This exam is required to attain the Cisco Firewall Specialist, Cisco VPN Specialist, Cisco IDS Specialist, and the Cisco Certified Security Professional certification.

• The "Securing Cisco IOS Networks" exam concentrates on the IOS-based firewall feature set.

The Ideal Cisco Security Certification Candidate

Just to give you some idea of what an ideal Cisco Security Professional candidate is like, here are some relevant statistics about the background and experience such an individual might have. The ideal candidate will have the following:

• Minimum of a CCNA certification

The Cisco Security Certification track is the one of the most coveted certifications in the industry and this self-assessment can tell you what you already know and what you need to learn.

Put Yourself to the Test

The following series of questions and observations is designed to help you figure out how much work you'll face in pursuing a Cisco Security certification and what kinds of resources you can consult on your quest. Be absolutely honest in your answers, or you'll end up wasting money on exams you're not ready to take. There are no right or wrong answers, only steps along the path to certification. Only you can decide where you really belong in the broad spectrum of aspiring candidates.

Two things should be clear from the outset, however:

• Even a modest background with Cisco networking equipment will be helpful.

• Hands-on experience with the Cisco IOS and Cisco technologies is an essential ingredient for certification success.

Educational Background

1. Have you ever taken any computer- related classes? (Yes or No)

   If yes, proceed to question 2; if no, proceed to question 4.

2. Have you taken any classes on the Cisco internetworking technologies? (Yes or No)

   If yes, you will probably be able to handle the discussions relating to the Cisco Security technologies. If you're rusty, brush up on the basic Cisco concepts and networking. If the answer is no, consider some reading in this area. We strongly recommend reading a book that discusses CCNA material.

3. Have you taken any networking concepts or technologies classes? (Yes or No)

   If yes, you will probably be able to handle the networking terminology, concepts, and technologies (but brace yourself for frequent departures from normal usage). If you're rusty, brush up on basic networking concepts and terminology. If your answer is no, you might want to check out some titles on TCP/IP.

4. Have you done any reading on Cisco networks? (Yes or No)

   If yes, review the requirements from questions 2 and 3. If you meet them, move to the next section, "Hands-On Experience." If you answered no, consult the recommended reading for both topics. This kind of background will be a great help in preparing for the Cisco exams.

Hands-On Experience

Another important ingredient to success on all the Cisco tests is hands-on experience. If we leave you with only one realization after you take this self-assessment, it should be that there's no substitute for time spent installing, configuring, and using the various Cisco IOS commands and tools on which Cisco will test you repeatedly and thoroughly.

5. Have you configured and worked with Cisco routers and switches? (Yes or No)

   If yes, make sure you understand the basic concepts covered in the CCNA exam.

   If you haven't worked with Cisco routers and switches, you must obtain a copy of a CCNA book and first learn that material.

   

   You can obtain the exam objectives and other information about Cisco exams from the CCO (Cisco Connection Online) Training and Certification page on the Web at http://www.cisco.com/warp/public/10/wwtraining/.

   
   

   Before you even think about taking any Cisco exam, make sure you've spent enough time with Cisco routers and switches to understand how they can be installed, configured, and maintained . This knowledge will help you in the exam ”as well as in real life.

If you have the funds or your employer will pay your way, consider taking a formal training class. Look for training classes with instructors with real-world experience and knowledge of current Cisco exams. You will also want access to actual Cisco routers and switches running current versions of the IOS.

Testing Your Exam Readiness

Whether you attend a formal class on a specific topic to get ready for an exam or use written materials to study on your own, some preparation for the Cisco certification exams is essential. At $125 a try, pass or fail, you want to do everything you can to pass on your first try. That's where studying comes in.

We included in this book exam preparation questions for each chapter and two practice tests, so if you don't score well on the chapter questions, you can study more and then tackle the practice tests in Chapters 12 and 14. If you don't earn a score of at least 80% on Practice Exam 1 and 85% on Practice Exam 2, you'll want to investigate the other practice-test resources available via the Web. (Locate them by using your favorite search engine.)

For any given subject, consider taking a class if you've tackled self-study materials, taken the test, and still not passed. If you can afford the privilege, the opportunity to interact with an instructor and fellow students can make all the difference in the world.

Even if you can't afford to spend much at all, you should still invest in some low-cost practice exams from commercial vendors because they can help you assess your readiness to take a test better than any other tool.

0. Have you taken a practice exam on your chosen test subject? (Yes or No)

   If yes ”and you scored 80% or better on Practice Exam 1 and 85% or better on Practice Exam 2 ”you're probably ready to tackle the real thing. If your score isn't above that crucial threshold, keep at it until you break that barrier . If you answered no, obtain all the free and low-budget practice tests you can find (or afford) and get to work. Keep at it until you can comfortably break the passing threshold.

There is no better way to assess your test readiness than to take a good-quality practice exam and pass with a score of 80% or better on Practice Exam 1 and 85% or better on Practice Exam 2. When we're preparing, we shoot for 90+% just to leave room for the "weirdness factor" that sometimes shows up on Cisco exams. Not only does Cisco have an interesting way of asking exam questions, but it also throws in the occasional strange question.

Assessing Your Readiness for Exam 642-501

In addition to the general exam-readiness information in the previous section, other resources are available to help you prepare for the exams. You can check out newsgroups and group -study Web sites via http://www.google.com. The groups at http://groups.google.com are great places to ask questions about topics you are having trouble understanding and to get good answers or simply to observe the questions others ask (along with the answers, of course). The Cisco exam guidelines also provide information on the things you need to know for the exam. You can access the exam guidelines by going to http://www.cisco.com/warp/public/10/wwtraining/certprog/testing/current_exams/642-501.html.

We'd also like to recommend that you check out one or more of these books as you prepare to take the exam:

• Benjamin, Henry. CCIE Security Exam Certification Guide (CCIE Self-Study) . Indianapolis, Indiana: Cisco Press, 2003.

• Malik, Saadat. Network Security Principles and Practices (CCIE Professional Development) . Indianapolis, Indiana: Cisco Press, 2002.

One last note: We hope it makes sense to stress the importance of hands-on experience in the context of the exams. As you review the material for the exams, you'll realize that hands-on experience with Cisco commands, tools, and utilities is invaluable.

Onward, Through the Fog!

After you've assessed your readiness, undertaken the right background studies, obtained the hands-on experience that will help you understand the products and technologies at work, and reviewed the many sources of information to help you prepare for a test, you'll be ready to take a round of practice tests. When your scores come back positive enough to get you through the exam, you're ready to go after the real thing. If you follow our assessment regimen, you'll know not only what you need to study, but also when you're ready to make a test date at a Cisco testing center (VUE or Prometric). Good luck!