Security+ Study Guide, 2nd Edition (SYO-101)

Rating:
Summary: Used this book (2nd edition) and passed the test
Review: I passed the test with a 836. This is midway between the passing cutoff (764) and the maximum score (900).

Context for this review: I have no background in InfoSec. However I have been a network engineer since 1996 and have earned the following certs: CNE, MCSE, ASE (Compaq Proliant servers), CCNA, CCDA, A+, and two from 3Com (wireless and IP Telephony). Your background is likely to be different so please read my comments with that in mind.

This book is on CompTIA's Authorized Quality Curriculum list for this test and I think it deserves to be. However, because there were several questions on the test that the book did not cover I rate this book 4 stars.

If you are new to InfoSec you may want to use the training strategy that has worked for me now, and before, to learn and certify into a field new to me: Read a good introductory hands-on book, then read a certification study guide, finally read a quick review book. This strategy gives me three points of view and heavily reinforces the learning. Remember, it's not just about passing a test. It's about being competent in the field.

If this strategy appeals to you a good intro book is Matthew Strebe's "Network Security JumpStart" published by Sybex in 2002, ISBN 0-7821-4120-X. This is not a hands-on book but Security+ does not test for hands-on abilities (it's conceptual). The quick review book I used is "Security+ FastPass" published by Sybex in 2004. ISBN 0-7821-4359-8. Caution: The FastPass book gets asymmetric cryptology and public/private keys wrong (the Study Guide gets it right; also goto rsalabs.com and click Crypto FAQ).

I hope you find these comments useful.

Dennis Duffy, MBA and Network Engineer