Re: Question for long-time CCIEs: Recertification options

From: sean@ttank.com
Date: Sun Sep 15 2002 - 16:34:29 GMT-3


Tom,

I recently passed the CCIE security written exam and got re-certified for
my CCIE R/S. As you mentioned, this is a harder route compared to other
re-cert alternatives. The CCIE security written exam is more of a generic
security exam that covers very broad areas of Cisco security technologies,
vendor-branded security devices and other common security topics. What's
worse is there isn't any good text books or reference materials like those
available for CCIE R/S written exam that most of us all know about (Caslow,
Doyle, etc.) Due to lack of study materials, I did not study anything
specific for the security written exam. But I did take some extra steps in
studying for the Cisco Security Specialist 1 (CSS-1) certification, which
requires four exams:

1. Manage Cisco Network Security #640-442
2. Cisco Secure PIX Firewall Advanced #9E0-571
3. Cisco Secure Virtual Private Network #9E0-570
4. Intrusion Detection System with Policy Manager #9E0-572

Those extra steps definitely helped me in passing the CCIE security written
exam, which covers about 30% of overall tested topics. Your CCIE R/S
knowledge will be a big help too, simply because this is a CCIE level test
and it demands a solid understanding of basic routing and switching as the
foundation of any security implementation; this part will take care of
another 40-50% of the exam topics. Besides, you are expected to know the
security implementations of Unix and NT systems, VPN, IPSec, MLSP, L2TP,
VPDN, AAA, SSH, SSL, LDAP and Active Directory, etc. This sounds a lot, but
it is a broad security test.

The bottom line is, if you are not interested in security stuff and looking
for getting a second CCIE for Security, you will much better off by just
taking the CCIE R/S written exam 350-001 for your re-cert purpose. For
people who have gotten their CCIE's, I really don't think there should be
any problem passing the CCIE written exam. Just go in there and take it
cold, you'll pass. It's only a matter of time and $300 exam fees ;-)

Just my 0.02

- Sean Liu

CCIE, CSS-1, AIX-CATE, CNE
CCSE, CCDP, CCNP, MCSE+I

Think Tank Systems, LLC

|--------+----------------------->
| | "Tom Larus" |
| | <tlarus@cox.n|
| | et> |
| | Sent by: |
| | nobody@groups|
| | tudy.com |
| | |
| | |
| | 09/15/2002 |
| | 08:38 AM |
| | Please |
| | respond to |
| | "Tom Larus" |
| | |
|--------+----------------------->
>------------------------------------------------------------------------------------------------------------------------|
  | |
  | To: <ccielab@groupstudy.com> |
  | cc: |
  | Subject: Question for long-time CCIEs: Recertification options |
>------------------------------------------------------------------------------------------------------------------------|

There has been a good bit of discussion of recert. recently. I have been
looking at the Cisco website on this. From what I can tell, I could take
my
recert exam one month after passing the Lab Exam, if I wanted to, and the
two years would run from the date I am due to be recertified, just as it
would run from that date if I were to recertify late. Can anyone think of
any problem with this?

And it looks like I could take the 350-03 exam, which focuses on IP. I
should think that it might be a good idea to take it now, while it is all
very fresh in my head. The other attractive alternative is to study
Security and take the Qualifier exam for that to count as recert exam.
That
is obviously a hard route, and security material is not as interesting to
me
as routing and switching is (but that was the most interesting material I
have ever studied in my life).

Any thoughts on this?

Tom Larus, CCIE #10,014



This archive was generated by hypermail 2.1.4 : Mon Oct 07 2002 - 07:43:52 GMT-3