• To ensure you get the most out of your CIN membership and stay connected with the latest updates, we are asking all members to update their community profiles. Please take a few moments to log in and: • Complete all sections of your profile • Review your current information for accuracy • Enter an alternative email address if desired (CIN requires your valid business email address for your training organization). Keeping your profile up to date helps us better serve you, ensures your account is correctly linked with CompTIA’s CRM, streamlines processes, enhances communication, and guarantees you never miss out on valuable CIN opportunities. Thank you for taking this important step! step!

Tech+ Focus Group

I know that this is for the ITF+ but there is no current group or thread for the Tech+ yet. I was one of the instructor SMEs that met in Chicago during the 2023-2024 school year to help develop the new Tech+ course. While teaching the course this year, I noticed that there were several issues with the content. Since there have been a lot of changes within CompTIA recently, I was hoping that someone within the CompTIA organization might be willing to set up a focus group to review the content and suggest changes to the Tech+ course now that we have had a chance to teach the content. If so I would be interested in being part of the focus group

CertMaster Learn Network+ version 9.1

Lab 6.1.8: View Open Ports
When you run Zenmap you get the results that the support computer has port 5900 closed (In red). Means nothing is listening on that port, but that is the computer they want you to remove VNC from, which VNC is installed on that computer. Can anyone give me information as to why this lab is not showing Green with an open port???
  • Love
Reactions: precious

Authorized partner list is gone?

Hiya!

CompTIA used to have a directory on their site, where one could lookup authorized (delivery) partners. I was on that list.

I can't seem to find the list anymore. Some cached pages on Google still have hints that the list used to be there, but I just really, really can't find it anymore.

I've already pinged Luke to ask him what's up, but maybe someone else knows? Where did the list go?!

CIN TTT Series: Cloud+ CV0-004

I am pleased to announce we are ready to launch the Cloud+ CV0-004 TTT series! Join us and special guest Michael Schmitz as he leads the Cloud+ TTT series using the CompTIA CertMaster Learn content. Michael will cover the exam objectives and provide hands-on examples as you strengthen your fundamental cloud technology knowledge and proficiency in managing cloud environments.

Please note that this series is only four sessions! That is because a lot of what is covered should be refresher from Network+ and some of Security+. So please brush up those series so you can stay up with what is happening in the clouds!

What: CIN TTT Series Cloud+ CV0-004 4 sessions
When: Sept 24, 2024, 2:00 - 4:00 PM Central Daylight Time, Tuesday and Thursday
Who: Michael Schmitz
Where: ON24

REGISTER HERE

06689 CIN Webinar Banners-02.pngCloudPlus Logo(1).png

Seeking Network+ instructor for 4x 1 hr classes over 4 months

Hi,
We are a nonprofit that will host an online, virtual Network+ cert course. This will occur over several months and we have the lessons already to go using a popular online platform. We would like an instructor to host a 1 hr. monthly session each month for 4 months to help the students navigate and summarize what they should be focusing on as they progress, or they may have questions about the content as they navigate thru the online course. This is a REMOTE learning format. Zoom/Google Meet links will be provided.
If interested please email: [email protected]
M-

My Journey in Cybersecurity: From Security+ 2003 to Advanced Certifications

My cybersecurity journey has been a fascinating evolution, spanning over two decades of continuous learning and professional growth. Back in 2003, I first obtained my CompTIA Security+ certification, which was a significant milestone in my career. Recently, I revisited this foundational certification by successfully passing the latest Security+ (SY0-701) exam, demonstrating the importance of staying current in our rapidly changing cybersecurity landscape.

I will complete Pen+, CySA+ and CASP this year. I wrote an ARP Poisonging detection tool in Python and was going to share it, but when testing there were a few errors so I will test it further.

Am I overthinking the new Pentest+ 003?

In the past, I've found that the certification exams do a pretty good job of meeting the outcomes stated at the top of the exam guide regardless of the material that is presented for the different learning objectives...ie that there is often a difference of interpretations between what gets trained and how it gets tested.

This particular exam and the course material seems to leave a lot of whitespace within the words used to define the outcomes and objectives, and the scope of the objectives (given the number of sub-topics), that a test developer can fill in ... (outcomes and a couple of objectives noted at the bottom of the post)

For example, in Pentest+ 003 what is the definition of phases, ttp's, and laws referenced in the outcomes?
a) phases that the outcomes refer to (note the domains and objectives don't follow any published pentest methodology and seem to conflate phases with tactics in mitre attack)
b) which list of tactics, techniques and procedures are we aligning the attacks, tools and phases with...(note Mitre attack is the only ttp listed but it is not used consistently in the objectives)
c) what laws and compliance/control frameworks should we be aligning the attacks with (note, I don't really see this level of detail reflected in the course material...the objectives just say security and privacy laws in 1.1 and the frameworks in objective 1.3 don't identify any control frameworks beyond the owasp masvs)

...and given the outcomes, 80+ tools and 100+ "attacks", and just 2 of the objectives (noted below), I'm led to believe that the students will need to:
1. Associate each tool with all of the relevant phases, tactics and techniques...note I don't know what the authoritative list/lists of these are
2. Be able to script the commands and switch options for every tool ... and associate those with specific attacks
3. Know the appropriate mitigations for each attack and probable root causes for each control's failure
4. Be able to identify an attack with the control or law you intend to test

so, am I overthinking what my students will need to be capable of or where the test writers may take the exam?

---------exam outcomes and objectives -----------

The exam guide identifies 4 outcomes for Pentest+ 003:
• Plan, scope, and perform information gathering as part of a penetration test.
Perform attacks that are aligned to and fulfill legal and compliance requirements.
• Perform each phase of a penetration test using and modifying appropriate tools and use the appropriate tactics, techniques, and procedures.
Analyze the results of each phase of a penetration test to develop a written report, effectively communicate findings to stakeholders and provide practical recommendations.

That said, the 26 objectives (including 15 apply and 3 analyze level of learning) list over 80 pentest tools/platforms/technologies and over 100 attacks/tactics/techniques. Including these two doozies
- Given a scenario, use scripting to automate attacks.
- Given a scenario, analyze the findings and recommend the appropriate remediation within a report.

Realistic Presentation Planner for Comptia Network+

I'm having some difficulty on delivering the course for the new Comptia Network + certification in a week. The training materials contains a Course Paging Guide for a 5 day course but the total estimated instructional time there is 5942 minutes which means aproximately 99 hours, too much for a week.

Do you have any materials with recommendations about the recommended timing for the course so I can deliver the knowledge in a week (8 hours per day)? For example, the old course had a document called Presentation Planner for Network+ which you could have used for schedulling the time.

DeepSeek

A Chinese artificial intelligence company called DeepSeek has released an AI app with development costs estimated at only $6 million. OpenAI, Google, and other major US companies are on track to invest roughly $1 trillion over the coming years. The news has caused NVIDIA to lose 15% of its stock value in one day.

The exceptionally low development cost, and the fact that it runs on older processors, have rocked the AI market.

https://www.cbsnews.com/news/what-is-deepseek-ai-china-stock-nvidia-nvda-asml/

  • Question
CertMaster Perform DataX "Master" Solutions for Reference

Good Day Everyone!

Is there a master solution set for the Live Labs for the DataX class? For example, a ZIP file that contains working examples of all of the Jupyter Notebooks?

Any other insights are appreciated!

Thank you,
Ben

  • Question
Account Manager disappeared!

Hi, can someone please help me. I am an authorized delivery partner and my account manager who i have been communicating with suddenly disappeared. No answers to emails or calls. Comptia help have also been unresponsive. Does anyone know who i can contact? I will really appreciate some clues.

How can i find my Account Manager!

[Please ignore this message]Hi, can someone please help me. I am an authorized delivery partner and my account manager who i have been communicating with suddenly disappeared. No answers to emails or calls. Comptia help have also been unresponsive. Does anyone know who i can contact? I will really appreciate some clues.
  • Like
Reactions: precious

Facebook’s Linux Ban

A recent Facebook decision to block posts and groups related to Linux, categorizing them as "cybersecurity threats," and even claiming that Linux is malware is a big concern within the tech community. DistroWatch, has reported being restricted since January 19, with users experiencing account suspensions for disseminating Linux-related content. As instructors and IT professionals, many of us rely on social media platforms like Facebook to share knowledge, discuss open-source tools, and educate others about Linux.
How will this impact the tech community and cybersecurity education?

Tech Differences Between Net+ and Sec+ Objectives and Content

Hey there, fellow Instructors. A couple of notes if you are teaching Network+ and Security+. I noted that some topics are covered in both, but the coverage between the objectives, the course content, and the possible exam questions may differ.

(1) How DNS works and how DNS is secured. Network+ covers DNS over UDP, DNS over TCP, DNS over HTTP (DoH), and DNS over TLS (DoT). DoT and DoH are included in the latest Network+ objectives (but not in the Security+ objectives. I cover these in both courses. I point out the difference in the objectives. I also challenge (quiz) students with questions that differentiate these protocols. I also noted differences in how the topics were covered in the latest Mike Chapple and Mike Meyers Study Guides.

(2) Disaster Recovery (DR) is covered in Net+ and Sec+. Net+ objectives call out RPO, RTO, MTBF, and MTTR. Sec+ objectives call out RPO, RTO, MTD, and MTBF (no MTTR). I had students ask me questions about this after taking both exams. I recently took the Net+ exam and saw this topic. I'd advise covering these terms in both courses with some reinforcement (ask questions or include them in the quiz).

My advice to students is that understanding the details of a technology or process helps them perform better on exams. These are two topics that I explore in greater depth to aid students in developing that understanding.

Filter