• To ensure you get the most out of your CIN membership and stay connected with the latest updates, we are asking all members to update their community profiles. Please take a few moments to log in and: • Complete all sections of your profile • Review your current information for accuracy • Enter an alternative email address if desired (CIN requires your valid business email address for your training organization). Keeping your profile up to date helps us better serve you, ensures your account is correctly linked with CompTIA’s CRM, streamlines processes, enhances communication, and guarantees you never miss out on valuable CIN opportunities. Thank you for taking this important step! step!

Why recertify?

I've been a technical trainer for 25+ years. I've taken more than 16 different cert exams from CompTIA and re-certified in many of them two, three, four, five, or even six times. I've even re-certified in two CompTIA certs that were "good for life" certifications. Mostly, this was due to requirements from end clients who wanted me to hold the most recent version of the cert exam that they wanted me to teach. It doesn't matter that I've passed Security+ in 2005, 2010, 2019, 2021, and 2023. They don't trust that my 25+ years of technical training experience, list of certs, and continuing education make me qualified to teach the latest version of the exam. Because they think that the exam is different now, since the version number changed.

Honestly, I never studied for recertification exams. By teaching the courses on a regular basis, I drilled the information into my long-term memory. Every time an exam versions, only 10%-15% of the exam objectives change, mostly because they gradually add new content. But the evolution of the exams is extremely slow. There are lots of topics on my first Security+ exam that are still on the most recent Security+ exam.

It's strange because the same clients don't seem to care that I've only taken the ISC2 CISSP, ISC2 CCSP, ISACA CISM, or any other exam only one time each. They only seem concerned that I've passed THE MOST RECENT version of the CompTIA exam, apparently because passing a previous version doesn't matter in their eyes.

CompTIA doesn't print the version number on the certifications. And they don't care if you renew the cert by taking the new version, or by racking up CEUs, or by passing a different industry cert. That's what I've been doing the last few years.

Out of all my current active CompTIA certs, the one that expires the soonest is in 2027, and the one that expires the furthest out is 2031.

I really have to thank CompTIA for all the free certs and the free and discounted Beta exams over the years. Honestly, if it weren't for them, I probably wouldn't have taken as many exams as I have over the years. The costs add up quickly. Students complain nonstop about voucher costs, when CompTIA is one of the most affordable options on the market. Go check the cost of ISC2, ISACA, OffSec, and GIAC exams if you don't believe me.

I have chosen NOT to take new versions of the exam for certs I already hold. I don't learn anything new by studying for a cert that I've already passed multiple times. I'm completely fine renewing my certs by getting different certs or by racking up CEUs from webinars, conference attendance, and other educational opportunities.

I've got vouchers for Linux+. DataAI, and I'm still waiting on a voucher for Data+ (which I let expire). I'm attending the SecAI TTT, and am looking forward to taking a crack at that exam to see if there's anything new for me on that exam. Mostly, I'm looking for new challenges, not just repeating old challenges.

For those who choose to pass version after version of the CompTIA exams, I wish you the best. If that works for you, I will not disparage it. It just doesn't work for me any more.
Greg, I can appreciate your view of this subject because you are saying what all of us feel. I like that you are just maintaining the CEUs for the certs I have and moving on to other certs from different organizations. The plus to our field is that there is always something to learn, and the minus is that there is always something to learn. It is a double-edged sword.

Peter

Why recertify?

Meh, I'm just old. If you do anything long enough, it should get easier. But I still have occasional pangs of imposter syndrome to this day.

I've always been a voracious learner. Even in college, high school, and before that. I get bored if I'm not learning something new. My company just granted me access to CrowdStrike University, so I'm going to see if I can run the table on their certifications, in addition to the other vouchers I've acquired.

If You Had to Restart Security+, What Would You Do Differently?

I think Roger Whyte has it. I don't have much to add to it. Just the following thoughts.
  1. You can do too many practice exams ... do not to memorize a bunch of answers - focus on what you don't already know - look up and be able to explain wrong answers.
  2. labs, labs, labs - comptia devleoped some really great labs. Do as much as you want with those Kali linux machines and what they have installed on them. Labs help develop your muscle memory
  3. Sorry. Didn't agree.
  4. I don't mind hearing the same information from two different sources, but usually I just stick with a really good reference book and AVOID wikipedia.
My thoughts are inserted into Kristina's response.

Why recertify?

Thanks for that post, Greg.

Reading this and your other postings, I believe you are (at least in my opinion) an alpha lifelong learner. I'm close, but I think you have me beat in terms of technical diversity. I see that Jason Eckert liked your post, and in my book, he's an alpha too.

I'm confident that the testing strategy you describe works for you, given where you are in your career. I'sd suggest that you describe a place where many CINers want to get to.

CIN TTT Series SecAI+ V1

I am also curious about that if anyone knows.
I asked directly and got this answer:(
At this time, the detailed schedule (including the exact number of days) for the new Security AI (SecAI) training has not been publicly finalized/shared in the same way as our established courses. Because of that, I’m not able to confirm whether it will be a 3 day course or a different duration yet.

What I can recommend in the meantime:

• Keep an eye on the official CompTIA training and certification pages here:

CertMaster Training | CompTIA for Training

• If you receive CompTIA newsletters or partner communications, those channels will typically announce new training offerings and formats (including course length) as soon as they’re available.

As soon as CompTIA publishes official details on SecAI training (including duration, delivery format, and availability), that information will appear on the main site and in those communications.

Why recertify?

I've been a technical trainer for 25+ years. I've taken more than 16 different cert exams from CompTIA and re-certified in many of them two, three, four, five, or even six times. I've even re-certified in two CompTIA certs that were "good for life" certifications. Mostly, this was due to requirements from end clients who wanted me to hold the most recent version of the cert exam that they wanted me to teach. It doesn't matter that I've passed Security+ in 2005, 2010, 2019, 2021, and 2023. They don't trust that my 25+ years of technical training experience, list of certs, and continuing education make me qualified to teach the latest version of the exam. Because they think that the exam is different now, since the version number changed.

Honestly, I never studied for recertification exams. By teaching the courses on a regular basis, I drilled the information into my long-term memory. Every time an exam versions, only 10%-15% of the exam objectives change, mostly because they gradually add new content. But the evolution of the exams is extremely slow. There are lots of topics on my first Security+ exam that are still on the most recent Security+ exam.

It's strange because the same clients don't seem to care that I've only taken the ISC2 CISSP, ISC2 CCSP, ISACA CISM, or any other exam only one time each. They only seem concerned that I've passed THE MOST RECENT version of the CompTIA exam, apparently because passing a previous version doesn't matter in their eyes.

CompTIA doesn't print the version number on the certifications. And they don't care if you renew the cert by taking the new version, or by racking up CEUs, or by passing a different industry cert. That's what I've been doing the last few years.

Out of all my current active CompTIA certs, the one that expires the soonest is in 2027, and the one that expires the furthest out is 2031.

I really have to thank CompTIA for all the free certs and the free and discounted Beta exams over the years. Honestly, if it weren't for them, I probably wouldn't have taken as many exams as I have over the years. The costs add up quickly. Students complain nonstop about voucher costs, when CompTIA is one of the most affordable options on the market. Go check the cost of ISC2, ISACA, OffSec, and GIAC exams if you don't believe me.

I have chosen NOT to take new versions of the exam for certs I already hold. I don't learn anything new by studying for a cert that I've already passed multiple times. I'm completely fine renewing my certs by getting different certs or by racking up CEUs from webinars, conference attendance, and other educational opportunities.

I've got vouchers for Linux+. DataAI, and I'm still waiting on a voucher for Data+ (which I let expire). I'm attending the SecAI TTT, and am looking forward to taking a crack at that exam to see if there's anything new for me on that exam. Mostly, I'm looking for new challenges, not just repeating old challenges.

For those who choose to pass version after version of the CompTIA exams, I wish you the best. If that works for you, I will not disparage it. It just doesn't work for me any more.

CEU's for SecurityX

Any one of these other certs will give you the full 75 CEUs to renew SecurityX.


Any one of these certs will give you partial CEUs to apply against the required 75 CEUs to renew SecurityX.


This page explains training options and the maximum number of CEUs you can earn with each activity.


Personally, I just study for another industry cert. It updates SecurityX and I get a new cert. The last time, I updated SecurityX with my CISM.

If You Had to Restart Security+, What Would You Do Differently?

I'm a big documentation guy. I can read through a 500-page book and go over the material again and again until I understand it and commit it to LONG-TERM MEMORY. When I study for a certification exam, passing the exam is not my ultimate goal. It's learning the material the exam covers because it builds new skill sets I can use in a technical field. Learning the material well enough to apply it in real-world scenarios is much more challenging than prepping for an exam.

Too many students want shortcuts. They want to watch a few videos (at 1.5X speed), and then take a battery of practice exams back-to-back. They don't want to put in the hard work and effort necessary actually to learn the material. They forget 90% of it after the exam is over because they're only concerned with short-term memory so they can pass the exam and check a box for a recruiter. Most of the fail technical interviews miserably and blame the industry because they can't find gainful employment.

Aim for the stars, not for the floor.

  • Question
CEU's for SecurityX

I was wondering if anyone has some information and resources to CEU's that have been submitted in the past to update their SecurityX (CASP+) certification. I know CompTIA provides a list of options like CISM, or CISSP, but I'm sure there are other options, like courses and educational videos to participate in as well. Just trying to create a list of options for those who have passed their CASP but don't want to take a higher level certification.

If You Had to Restart Security+, What Would You Do Differently?

I completely disagree. I have passed 14 different CompTIA certification exams, and recertified several times for many of them, without taking a single practice exam. I didn't have any practice exams for the CISSP, CISM, or CCSP either.
While I, myself, have taken plenty of practice exams, mostly because I do better solving problems, I can also say that, unless it's some kind of weird brain-dump, I've never seen practice tests that are on the level with cert testing. Most practice exams seem to settle on Cognitive Blooms 1 to 2, where real cert grade questions are somewhere more 2 to 3.

And I've seen a lot of practice platforms, like ol' Transcender, which I feel was basically gutted when Kaplan bought it out, all the way up through to CertMaster.

My problem with practice testing is that, often, candidates get a false sense of security when drilling exams. If a candidate takes too many on a single platform, scoring 95%, he/she may feel ready - only to get into the exam and bomb it.

One of the things I have done to prepare for exams that is often overlooked is read the book's glossary and index. Go through each term and see if you can explain what it is - compare to the definition. I do this after completing any book that I read. Sometimes, it helps me to make sure I've nailed down the concepts.

In the end, there are no silver bullet to learning a certification in my book. Each will have their own process and things that work. I think it lands with being dedicated to learning the material, not just brain-loading a bunch of information and hoping for the best.

If You Had to Restart Security+, What Would You Do Differently?

  1. Can never do enough practice exams - obviously the better written ones would resemble the real exam, but do as many practice exams to learn new topics, not to memorize a bunch of answers - focus on what you don't already know
I completely disagree. I have passed 14 different CompTIA certification exams, and recertified several times for many of them, without taking a single practice exam. I didn't have any practice exams for the CISSP, CISM, or CCSP either.

If you read the exam objectives thoroughly and learn the material to the degree that you can comprehensively explain it to others, there is no need for practice exams.

For the few I have looked at, even highly rated ones, I haven't found any that I would endorse. None are written in a similar style. Many go outside the exam objectives. And sadly, many of them have incorrect answers in the answer keys.

CIN Sneak Peek: CySA+ V4

Thank you for sharing this great opportunity. The CySA+ V4 update looks very interesting, especially with the focus on cybersecurity analytics and incident response evolution.


I would like to ask if there will be a Train-the-Trainer (TTT) session planned in relation to this new version. Also, will exam vouchers be provided to participants at the end of the session?


Looking forward to the event!

If You Had to Restart Security+, What Would You Do Differently?

  1. more emphasis on foundational concepts (CIA, Threat, vulnerability, Risk)
  2. More hands-on ...
I think Roger Whyte has it. I don't have much to add to it. Just the following thoughts.
  1. Can never do enough practice exams - obviously the better written ones would resemble the real exam, but do as many practice exams to learn new topics, not to memorize a bunch of answers - focus on what you don't already know
  2. labs, labs, labs - comptia devleoped some really great labs. They are a pleasure to work through and play around with the tools. You aren't stuck just doing the lab. Do as much as you want with those Kali linux machines and what they have installed on them. Play around with dvwa and any of the interfaces and learn and play and learn some more.
  3. Don't forget to research the simulations that are actually covered the exams. Make sure you know them well. The CompTIA official labs should have covered all of them.
  4. I don't mind hearing the same information from two different sources, but usually I just stick with a really good reference book and wikipedia. Hearing the same thing from two different perspectives gives me a deeper understanding, but I have limited time and want to maximize the use of the limited time I have. So reference manual for depth, and wikipedia for the high level overview that I need to have to understand the main point. Otherwise, I'm old enough that sooner or later I see the same crud on yet another textbook.

Filter