Skip to content
evolve.tt

Reference

The First Security Certificate Worth Paying For

The Evolve TeamCareersSecurity

If you are going to pay for one entry security certificate, CompTIA Security+ is the one job advertisements name most often. It does not make you a penetration tester.

The IT pathways map lists security as its own branch. People skip to the exciting job title and buy an exam voucher. The voucher is the last step, and only if this is the work you want.

  1. Learn free

    A full Security+ course for the current exam version.

  2. Explain phishing aloud

    If you need notes, you are not ready to pay.

  3. Then check the exam price

    On CompTIA's own site. The certificate is not a hacking licence.

Pay last

What the certificate is

Section titled “What the certificate is”

Security+ is a vendor-neutral exam about threats, access, networks, and the words security teams use. Passing it tells an employer you have studied that map. It does not tell them you have defended a network. Say that distinction in the interview before they discover it.

The price changes. Read it on CompTIA’s own site on the day you decide to pay. Do not trust a price in a forwarded advert, and do not trust a price on this page. This page is refusing to print one.

What to do before you pay

Section titled “What to do before you pay”
  1. Watch a full free course. Professor Messer’s Security+ videos are the usual recommendation. Search for his name and the current exam version. Match the version. An old video for a retired exam code will teach you the wrong objectives.
  2. Explain, out loud, what phishing is and what you would tell a relative who received one. If you cannot do that without notes, you are not ready to pay.
  3. Only then look at the exam price and a practice test from a legitimate vendor. Do not use stolen question dumps. They are a shortcut that leaves you unable to answer a human.

A support job, described in IT support as a first job, is still the better first job for many people. You will see real passwords reset badly, real malware warnings, and real users. The certificate makes more sense after you have seen those, not instead of them.

What not to buy first

Section titled “What not to buy first”

A “certified ethical hacker” title as your first spend. Those courses assume you already know the Security+ material and, more importantly, that you understand you may only test systems you have written permission to test. Starting there is how people acquire a logo and a dangerous misunderstanding.

Blockchain certificates and quantum courses are not a first security job. The map says the same thing. Ignore them until you can explain a firewall in one paragraph.

In this series

Section titled “In this series”

Discussion

View all discussions on GitHub