Certified Penetration. Testing Consultant (CPTC)

Transcription

1 Certified Penetration Testing Consultant (CPTC) Secrets To Acing The Exam and Successful Finding And Landing Your Next Certified Penetration Testing Consultant (CPTC) Certified Job 1

2 2

3 Write a review to receive any FREE ebook from our Catalogue - $99 Value! If you recently bought this book we would love to hear from you! Benefit from receiving a free ebook from our catalogue at if you write a review on Amazon (or the online store where you purchased this book) about your last purchase! How does it work? To post a review on Amazon, just log in to your account and click on the Create your own review button (under Customer Reviews) of the relevant product page. You can find examples of product reviews in Amazon. If you purchased from another online store, simply follow their procedures. What happens when I submit my review? Once you have submitted your review, send us an at review@emereo.org with the link to your review, and the ebook you would like as our thank you from Pick any book you like from the catalogue, up to $99 RRP. You will receive an with your ebook as download link. It is that simple! Copyright Notice of Rights All rights reserved. No part of this book may be reproduced or transmitted in any form by any means, electronic, mechanical, photocopying, recording, or otherwise, without the prior written permission of the publisher. No Claim to Orig. U.S. Govt. Works. Notice of Liability The information in this book is distributed on an As Is basis without warranty. While every precaution has been taken in the preparation of the book, neither the author nor the publisher shall have any liability to any person or entity with respect to any loss or damage caused or alleged to be caused directly or indirectly by the instructions contained in this book or by the products described in it. Trademarks Many of the designations used by manufacturers and sellers to distinguish their products are claimed as trademarks. Where those designations appear in this book, and the publisher was aware of a trademark claim, the designations appear as requested by the owner of the trademark. All other product names and services identified throughout this book are used in editorial fashion only and for the benefit of such companies with no intention of infringement of the trademark. No such use, or the use of any trade name, is intended to convey endorsement or other affiliation with this book. 3

4 This book figures out ways to boil down critical exam and job landing concepts into real world applications and scenarios. Which makes this book user-friendly, interactive, and valuable as a resource long after students pass the exam. People who teach Certified Penetration Testing Consultant (CPTC) classes for a living or for their companies understand the true value of this book. You certainly will too. To Prepare for the exam this book tells you: What you need to know about the Certified Penetration Testing Consultant (CPTC) Certification and exam Preparation Tips for passing the Certified Penetration Testing Consultant (CPTC) Certification Exam Taking tests The book contains several suggestions on how preparing yourself for an interview. This is an aspect that many people underestimate, whilst having a well-written CV, a personal blog, and possibly a number of past projects is definitively important - there is much more to prepare for. It covers non-technical aspects (how to find a job, resume, behavioral etc.). A Must-study before taking a Tech Interview. To Land the Job, it gives you the hands-on and how-to s insight on Typical Certified Penetration Testing Consultant (CPTC) Careers Finding Opportunities - the best places to find them Writing Unbeatable Resumes and Cover Letters Acing the Interview What to Expect From Recruiters How employers hunt for Job-hunters... and More This book offers excellent, insightful advice for everyone from entry-level to senior professionals. None of the other such career guides compare with this one. It stands out because it: Explains how the people doing the hiring think, so that you can win them over on paper and then in your interview Is filled with useful work-sheets Explains every step of the job-hunting process - from little-known ways for finding openings to getting ahead on the job This book covers everything. Whether you are trying to get your first Certified Penetration Testing Consultant (CPTC) Job or move up in the system, you will be glad you got this book. 4

5 5

6 Contents Certified Penetration Testing Consultant 10 Penetration test 31 Preparation Tips For The Certified Penetration Testing Consultant (CPTC) Certification Exam 37 Exam time Hints for managing tenseness 37 Exam Preparation Tips 39 Examination hints 43 Preparing for an Essay Exam 45 Multiple Choice examination tips 46 Test Taking Strategies 48 Memory Tips and Test Taking Strategies 50 More Test Taking Strategies 52 Stress Management Test Anxiety 54 Even More Test Taking Strategies 57 Specific Hints for Answering Multiple alternative Questions 58 Taking Tests 59 Before the Test 59 During the test 59 After the test 60 Exam time Hints for result driven studying 60 FINDING AND APPLYING FOR Certified Penetration Testing Consultant (CPTC) JOBS AND EVALUATING OFFERS 64 Where to Learn About Job Openings 64 Job Search Methods 64 Personal contacts. 65 School career planning and placement offices. 65 Employers. 65 Classified ads. 66 Internet resources. 66 Labor unions. 66 State employment service offices. 67 Job matching and referral. 67 Services for special groups. 67 Federal Government. 68 Community agencies. 68 6

7 Private employment agencies and career consultants. 68 Internships. 68 Applying for a Certified Penetration Testing Consultant (CPTC) Job 70 Resumes and application forms. 70 Gathering information. 70 Choosing a format. 71 Resume and KSA (knowledge, skills & abilities) tips: 72 Cover letters. 75 Certified Penetration Testing Consultant (CPTC) Job Interview Tips 76 Preparation: 76 Personal appearance: 76 The interview: 76 Information to bring to an interview: 77 Evaluating a Certified Penetration Testing Consultant (CPTC) Job Offer 78 The organization. 78 Should you work for a relatively new organization or one that is well established? 80 The job 80 Where is the job located? 80 Does the work match your interests and make good use of your skills? 80 How important is the job to the company or organization? 80 What will the hours be? 81 How long do most people who enter this job stay with the company? 81 The company should have a training plan for you. 81 Salaries and benefits. 81 WHAT TO EXPECT FROM THE OTHER SIDE OF THE TABLE 83 THE INTERVIEW AND SELECTION PROCESS 83 Step 1 85 Technical Competencies Assessment Guide 85 Step 2 86 Determine the Customer Service Focused 86 Competencies of the Job 86 7

8 Definitions: 87 Responsible. 87 Likeable. 87 Believable. 88 Outgoing. 88 Unflappable. 89 CUSTOMER SERVICE FOCUSED BEHAVIORS ASSESSMENT GUIDE 90 Step 3 91 Develop Interview Questions to Assess Both 91 Technical and Customer Service 91 Focused Competencies 91 Step 4 92 Conducting the Interview 92 Step 5 94 Background and Reference Checks 94 Making a Job Offer 94 Confirming Job Offer Letter 95 Informing Unsuccessful Candidates 95 Retention of Interview Materials 95 SAMPLE CUSTOMER SERVICE FOCUSED INTERVIEW QUESTIONS 96 Responsible 96 Likeable 97 Believable 98 Outgoing 99 Unflappable 100 INTERVIEWING Certified Penetration Testing Consultant (CPTC) 101 THE INTERVIEW PROCESS 101 Planning 101 Confirming/Scheduling Interview 102 Conducting the Interview 102 Closing 103 Follow Up 103 Interview Questions To Get You Started 104 Supervisor and Manager Competencies 104 Interviewing People With Disabilities 105 Accommodating Persons With Disabilities For An Interview 106 8

9 Interview Do s and Don ts 107 CHECKING REFERENCES 108 Which References Should I Check? 109 Tips for Checking References 109 The Reference Check Questions To Ask 110 Supervisory and Managerial Competencies: 112 Building Coalitions/Communication: 112 Recruiting Certified Penetration Testing Consultant (CPTC) - It Takes More Than A Job Announcement 112 Before Submitting the Vacancy 113 When the Vacancy Announcement is Open 114 Once the Certificate of Eligibles is Received 115 After The Selection is Made 116 ASSESSING YOUR RECRUITMENT AND SELECTION PRACTICES 117 Policies and Procedures 117 Recruitment Strategies 118 Glossary 119 9

10 Certified Penetration Testing Consultant Certified Penetration Testing Consultant The CPTC track supplies attendees with the singular opportunity to give a performance all stages of an actual penetration test in a controlled schoolroom environment. Hands on laboratories have been researched and built by principal security professionals from around the earth and are continuously updated. The CPTC shall cover much more in depth attacks techniques technologies and countermeasures than basis Penetration Testing and Ethical Hacking courses such as CPTE CEH and OSPT. Participants of the CPTC track shall have the way to having every necessary part laboratories in all of the following areas Perform a penetration test and submit a deliverable written evaluation Capture and replay VoIP buying and selling Find and manipulate to one s advantage databases with SQL Injection vulnerabilities Manipulate prices on e commerce websites Obtain and channel intelligence via Bluetooth enabled telephones Tools and means for picking easy and complicated locks Techniques for Wireless Site Surveying and Cracking WEP WPA keys Additionally attendees shall be meeting the standards and requirements to confidently take on the upcoming CPTC concerned with actual use or practice test. COURSE OUTLINE This track is designed to get an personal with information of the fundamental security auditing toolset to the next and higher level. Many courses instruct how to hack the CPTC track teaches the organization of penetration testing. The track delivers advanced and clipping sharpness techniques for auditing a broad gamma of security controls including Physical and User Security with rhands on laboratories designed by factual earth security auditors. The CPTC track also delivers the organization face of penetration testing including RFPs Authorization Security Policy Review and Compliance. The CPTC courseware is constantly updated with up- 10

11 dates obtainable to earlier than the present time students to think contemplate the most nowadays security issues and also known exploits this is the manner of the Certified Penetration Testing Consultant. UPON COMPLETION A Certified Penetration Testing Consultant is a security professional person with the way to design control and give a performance a penetration test. The designation Consultant is connected to the depth and breadth of know-how needed to control a project involving several squad members control the client s expectations and hand over an audit of security controls that is thorough well documented and ethically auditory event. COURSE DETAILS Module 0 CPTC Intro Module 1 Project Documentation Module 2 Internal Penetration Testing Module 3 Recon Scanning Enumeration Module 4 Testing External Networks Module 5 Core Impact Module 6 Testing Web and Database Module 7 Wireless Security Testing Module 8 Physical Security Module 9 Web Application Pen Testing Module 10 Security Web 2. 0 Module 11 Incident Handling Module 0 Certified Penetration Testing Consultant Intro Introductions Course Material Course Summary CPTC Practical Exam Student Facilities Module 1 Project Documentation 11

12 Summary What makes a CPTC Security Professional Code of Ethics Documentation Completion Types of Assessments Areas of Evaluation Defining Perimeters Security Policy Questions to Ask the Client The Proposal Defining Deliverables Required Legal Documents Assessment Service Agreement and Authorization paper Security Assessment Techniques Application Security Threat Assessment Application Security Architecture Review Automated External Application Scanning Automated Source Code Analysis Manual Penetration Testing Manual Security Focused Code Review The Report Report Criteria Supporting Documentation 12

13 Report Results Matrix Findings Matrix Delivering The Report Stating Fact Recommendations Executive Summary Technical Report Instructor Demonstration Report Table Of Contents Summary Of Security Weaknesses Identified Scope of Testing Summary Recommendations Summary Observations Detailed Findings Strategic and Tactical Directives Statement of Responsibility Appendices Instructor Demos Lab Exercises Module 2 Internal Penetration Testing Summary Potential Network to Test Why Internal Testing 13

14 Benefits of Internal Testing Testing Methods Internal Penetration Test Case Study Case Study Test Preparation RJ45 Connection What Hosts Are Connected Alternate Tool for Host Detection ARP Poisoning Password Sniffing Review Captured Password Enumerate Internal Services Automated Vulnerability Assessment Nessus Plug ins to Use Vulnerability Report Review Exploitation Methods Manual Penetration Testing The Report Recommendations Pen Testing Methodologies Instructor Demos Lab Exercises Summary 14