Security+ Command Line/Log Analysis

---

Failed my sec+ attempt. I think a good amount of it had to do with not knowing how to analyze logs and command line. Can anyone point me to which videos in the Security+ series have info on this?

@Kevin-Gates I am sorry to hear about the failed attempt, let's help get you the knowledge you need. Check out the Operational Security and Incident Response
section. We touch base on these topics, however interacting with these topics/tools/logs will strengthen your knowledge base. I would also recommend reviewing the following objectives and study them one at a time

and

Use this list as a check list and install some of these tools in a Windows or Linux machine with tools like VirtualBox, so you can get a feel for the output of the tools and logs. This will be a tremendous help in passing the exam.

Post contents were deleted at the request of the author.

@Michael-McKenney,

I will have to disagree with the the your assessment of CompTIA certifications. On the most basic level. Many job opportunities will not even consider you for the job or advancement without an industry recognized certification like CompTIA.

The exams themselves are challenging due the volume of material, the vendor neutral objectives, way those objectives will apply to the real world, and the rapidly changing industry. Their value to the company is a qualification of possible candidates, then interview likely and probably candidates. Their value to the individual being able to pre-qualify as a candidate to advance to the interview.

The reality is that the certification you earn provides an opportunity you may not have without it. But it doesn't guarantee you a job. Only your own willingness to learn more and do more will keep you on that job.

The certification training can teach you enough to pass an exam. Even so, it is not an end all.
After the certification, you must continue to develop and grow your skills in this ever changing industry. Regardless, if there is a certification or not. The fact is that studying for certifications are an easy path to keep up the study...even if you don't every sit for the exam.

So, what you say about CompTIA could be true. If so, they would require everyone to take official training from only CompTIA approved training providers. Instead, they allow for you, as individual to self-study and to seek other training providers like ITPro.TV. Also, they would require anyone who decided to begin training are REQUIRED to sit the exam. But their gain is really only when you decide to sit and test for the exam on your own.

So if you don't find value in it, CompTIA doesn't force it on you. Neither does any other certification vendor. Many trainers try to provide "more" than just passing the exam to prepare them to face the industry via the certification training. So I wouldn't lump what is taught as meaningless in any way. They must cover the exam objectives at the same time they provide meaningful training.