Showing posts with label information systems. Show all posts
Showing posts with label information systems. Show all posts

6/21/2012

CISA: Certified Information Systems Auditor Study Guide Review

CISA: Certified Information Systems Auditor Study Guide
Average Reviews:

(More customer reviews)
First, this should not be your only reference. There: got that out of the way.
I recommend this book along with the official questions and answers book and the official questions and answers supplement.
This book does a very good job of covering every topic with which you need to be very familiar in order to pass the test. It covers the practice areas as updated for 2006, which haven't changed for 2007. However, the questions in this book are terrible and do not represent the questions you will be asked on the actual test. Also, there are many editing errors in this book so be on the lookout.
The official questions and answers book and its supplement are essential. The test questions are often misleadingly (or just poorly) worded and correctly answering the multiple choice questions often comes down to almost arbitrarily deciding which one is "most" correct. You will have a hard time on the exam if you haven't subjected yourself to this abuse before hand.
I do not recommend the official study guide. The official study guide is so terrible on so many levels I wished I could throw it at an ISACA official after wasting my time and money on it. The writing is terrible: redundant, dry, and often times of questionable use and technical accuracy. The book itself has terrible typography and pedagogy that make it painful to read. The softcover, oversized dimensions, and spiral binding make it very annoying to carry or store anywhere other than on a flat desktop since it flops around. That it was so obviously cheaply produced and yet costs more than $100 is insulting.
So, in summary: This book is worth your money despite its flaws and will help you pass the CISA exam. Make sure you also buy the official questions and answers book and its supplement. Avoid the official study guide.

Click Here to see more reviews about: CISA: Certified Information Systems Auditor Study Guide



Buy Now

Click here for more information about CISA: Certified Information Systems Auditor Study Guide

Read More...

3/23/2012

System Center Operations Manager 2007 Unleashed Review

System Center Operations Manager 2007 Unleashed
Average Reviews:

(More customer reviews)
Anyone that uses System Center Operations Manager knows that the documentation is a bit sparse. This book more than makes up for that lack of information. The authors have created a very thorough and complete set of information starting with outlining the reason for SCOM and the underlying architecture. They spend a great deal of time and effort describing how to install and configure the tool. My favorite sections start about half way through when they get into configuring all the rules and monitors to gather data and respond to alerts. The chapter on reporting was also very helpful. They even include a small section on other management packs in the Appendixes, with information on the one that interests me most, SQL Server. The Appendix also has a great walkthrough on step by step configuring and tuning your own management pack.
I can't say this is a must own for anyone using SCOM, but if you've been floundering a bit, as I have, or you're just getting started, this is a fantastic resource to get you on your feet and get your SCOM system up and running.

Click Here to see more reviews about: System Center Operations Manager 2007 Unleashed

This book is your most complete source for in-depth information about Microsoft System Center Operations Manager 2007!System Center Operations Manager 2007 Unleashed is a comprehensive guide to System Center Operations Manager (OpsMgr) 2007. Like its MOM 2005 predecessor, OpsMgr 2007 helps you implement operations management, but with a far different and more holistic approach from MOM 2005's focus on individual servers.This book guides you through designing, deploying, and configuring OpsMgr 2007. You will find detailed information and hands-on experience on topics such as estimating database sizes and designing redundant OpsMgr configurations. You learn how to tackle challenges such as setting up ACS, establishing client monitoring, using and creating synthetic transactions and distributed applications, and developing management packs and reports.Size your OpsMgr databases Architect for redundancy and performance Install or migrate to OpsMgr 2007 Secure OpsMgr Back up OpsMgr components Understand how monitors and rules work Manage different aspects, including ACS, client monitoring, synthetic transactions, and distributed applications Extend OpsMgr Develop management packs and reportsCD-ROM includes:Database sizing spreadsheet Utilities, management packs, and reports Microsoft's best practices for rule and monitor targeting and PowerShell Cheat Sheet Live Links--more than 200 hypertext links and references to materials, connectors, sites, and newsgroups related to OpsMgrContentsIntroduction 1Part I Operations Management Overview and Concepts1 Operations Management Basics 112 What's New 633 Looking Inside OpsMgr 97Part II Planning and Installation4 Planning Your Operations Manager Deployment 1375 Planning Complex Configurations 2036 Installing Operations Manager 2007 2337 Migrating to Operations Manager 2007 277Part III Moving Toward Application-Centered Management8 Configuring and Using Operations Manager 2007 3039 Installing and Configuring Agents 36910 Complex Configurations 42511 Securing Operations Manager 2007 471Part IV Administering Operations Manager 200712 Backup and Recovery 53913 Administering Management Packs 59314 Monitoring with Operations Manager 647Part V Service-Oriented Monitoring15 Monitoring Audit Collection Services 73916 Client Monitoring 79717 Monitoring Network Devices 84518 Using Synthetic Transactions 90319 Managing a Distributed Environment 949Part VI Beyond Operations Manager20 Automatically Adapting Your Environment 100521 Reading for the Service Provider: Remote Operations Manager 104722 Interoperability 109523 Developing Management Packs and Reports 1141Part VII AppendixesA OpsMgr by Example: Configuring and Tuning Management Packs 1229B Performance Counters 1261C Registry Settings 1271D Active Directory and Exchange 2003 Management Pack Parameters 1295E Reference URLs 1305F On the CD 1323Index 1329

Buy NowGet 45% OFF

Click here for more information about System Center Operations Manager 2007 Unleashed

Read More...

2/03/2012

Official (ISC)2 Guide to the CISSP Exam ((ISC)2 Press) Review

Official (ISC)2 Guide to the CISSP Exam ((ISC)2 Press)
Average Reviews:

(More customer reviews)
Guys,
I finally took the CISSP exam, and passed *not* using this book alone. I ordered this book 1 month before taking the CISSP exam, since someone recommended me to buy it, saying that it's an advantage to go through the material in the book prior to the real exam. While that is generally true, some of the sad facts are not :).
The book was written by 3 authors, and reviewed by Hal Tipton (a very well respected and knowledgeable security professional); therefore, the content in the book is superior. And since it was written by 3 authors, it also means you will experience 3 different writing styles throughout the whole book. The format of the book is consistent, but tough luck, the writing style is so inconsistent--making it very unpleasant to digest the presented material.
I found some chapters are easy to digest with, and some are not (because of the 3 different writing styles from 3 authors). The book doesn't present the CBK material in a good way for you to memorize, it acts more like a reference book. I have read All-in-One and Prep Guide Gold Edition, and those 2 books are GREAT to start with. I do like the Official (ISC)2 Guide because it covers material that the other books DON'T. Especially the Physcial Security and Operations Security domain. After reading the Physical Security domain I had a feeling like "Great, I know how to pick a lock now ;)". This book also tells you what you need for the CISSP exam and what you don't, which is a really good thing. It clearly states that "this information is not needed for the CISSP exam... it's being included here for your reference" and I find that's very helpful, saving me from memorizing superfluous information.
The Physcial Security domain also covers the CCTV camera, very nice material indeed. You should expect to see some CCTV questions on the exam. If you don't really want to buy the book, you can easily search for the material on the net. But yeah the included material is worth it folks.
The book also comes with a CD that includes 204 CISSP sample questions, but beware, those questions ain't something that you might be able to see on the exam. I haven't found any practice tests useful, if at all (not even cccure.org). Don't buy practice tests, just concentrate on the CBK and you'll be fine. Don't expect similar or "exact" questions or anything like that popping up in the real CISSP exam. That just won't happen and CISSP practice tests are only of little use.
All in all, the material in the book is great for reference but not for memorizing. If you really want something to start with, please start with All-in-one, I wouldn't go for Krutz book as he has included tons of SUPERFLUOUS information (you do Krutz) in his book. So, before, the CISSP's choice was All-in-One + Prep Guide, but now it should be All-in-One + Official (ISC)2 Guide. You guys should never start preparing for the CISSP exam without All-in-One, the CBK material is presented to you in a very CONCISE and UNDERSTANDABLE manner. Although Shon Harris does love chatting, but I believe it's the only enjoyable way there is to learn and tackle the CISSP exam. Keep in mind this bottom line, All-in-one is a great book to start with and Official (ISC)2 Guide is a great "reference" book to keep.
Sorry, I'm too tired to go back and review what I have typed earlier so I end here ;). I don't give this book 5 stars because of the inconsistency in writing; otherwise, this book is great. You guys should buy it.

Click Here to see more reviews about: Official (ISC)2 Guide to the CISSP Exam ((ISC)2 Press)

Candidates for the CISSP exam can now go directly to the source for study materials that are indispensable in achieving certification. The Official (ISC)2 Guide to the CISSP Exam is derived from the actual CBK review course created and administered by the non-profit security consortium (ISC)2.In addition to being an invaluable study guide, this book is detailed enough to serve as an authoritative information security resource. Both of the guide's co-authors are CISSPs, and the entire text has been reviewed and approved by Hal Tipton, Co-Founder and Past President of ISSA and Co-Founder of (ISC)2. The ten subject areas included, each a section from the Common Body of Knowledge (CBK), have been reviewed by multiple CISSPs, all of whom are recognized leaders in their fields.A CISSP certification garners significant respect, signifying that the recipient has demonstrated a higher standard of knowledge, proficiency, and ethics. This book ensures that a student is fully prepared to face the exam's rigorous criteria. It is crafted to match the overall theme of the exam, which emphasizes a general, solutions-oriented knowledge of security that organizations want.

Buy Now

Click here for more information about Official (ISC)2 Guide to the CISSP Exam ((ISC)2 Press)

Read More...

12/13/2011

CompTIA A+ Practice Questions Exam Cram (Essentials, Exams 220-602, 220-603, 220-604) (2nd Edition) Review

CompTIA A+ Practice Questions Exam Cram (Essentials, Exams 220-602, 220-603, 220-604) (2nd Edition)
Average Reviews:

(More customer reviews)
I have used a lot of material to prepare myself for the CompTia A+ 601 en 602 exams (IT technician). This book stands out above all the others I have used in the practise exam department. The format is about the same as on the real exam, the questions are a little more difficult then on the real exam. The explanation of the answers are outstanding and give great insight in the material. Don't spend a little fortune on all sorts of practise exams (like I did), this book is the best and is enough. If you still want more, take a look at MeasureUp practise exams. Advice: take all the exam questions in the book and don't limit yourself to the questions that have do with the exams you are going to take. There is a lot of overlap between the exams.
After reading a lot of stuff I will only use ExamCram books in the future for preparing for IT exams; in my opinon they are the best.
I passed mid july both exams on the first attempt: 601: 735/900 and 602: 820/900.

Click Here to see more reviews about: CompTIA A+ Practice Questions Exam Cram (Essentials, Exams 220-602, 220-603, 220-604) (2nd Edition)



Buy NowGet 27% OFF

Click here for more information about CompTIA A+ Practice Questions Exam Cram (Essentials, Exams 220-602, 220-603, 220-604) (2nd Edition)

Read More...

12/12/2011

CompTIA Network+ All-in-One Exam Guide, Fourth Edition Review

CompTIA Network+ All-in-One Exam Guide, Fourth Edition
Average Reviews:

(More customer reviews)
Having read through this exam guide cover-to-cover, and having over 20 years of networking, internet, and telecommunications experience, this is a solid book for preparations to take the CompTIA Network+ exam. However, if you don't have significant experience in the area of networking or internet, you will need to increase your chances for passing the new 2009 Network+ exam by visiting other sites on the Internet particularly in the following areas:
* subnetting
* network security
* Local area network concepts
These topics can be researched very easily with an advanced Google search on the listed topics.
The rest of the topics for the 2009 CompTIA Network+ exam appear to be adequately covered. Mr. Meyers did an excellent job on the book, and should be commended.
I rate the book: 8 out of 10.


Click Here to see more reviews about: CompTIA Network+ All-in-One Exam Guide, Fourth Edition


All-in-One is All You Need

Get complete coverage of all the material included on the latest release of the CompTIA Network+ exam inside this fully updated, comprehensive resource. Written by CompTIA certification and training expert Mike Meyers, this authoritative exam guide features learning objectives at the beginning of each chapter, exam tips, practice questions, and in-depth explanations. Designed to help you pass the CompTIA Network+ exam with ease, this definitive volume also serves as an essential on-the-job reference.

Covers all exam topics, including how to:

Build a network with the OSI seven-layer model
Configure network hardware, topologies, and cabling
Connect multiple Ethernet components
Configure wireless networks
Work with network protocols, including TCP/IP, DNS, SIP, and IMAP
Configure IPv4 and IPv6 routing protocols
Share and access network resources
Interconnect network operating systems-Windows, Mac OS, UNIX/Linux
Set up clients and servers for remote access
Monitor and troubleshoot networks
Secure networks with firewalls, packet filtering, encryption, authentication, and other methods

The CD-ROM features

Practice questions
Video introduction to CompTIA Network+
A collection of Mike's favorite shareware and freeware networking tools and utilities
Complete electronic book


Buy NowGet 50% OFF

Click here for more information about CompTIA Network+ All-in-One Exam Guide, Fourth Edition

Read More...

10/29/2011

Using the Internet for Social Science Research and Practice Review

Using the Internet for Social Science Research and Practice
Average Reviews:

(More customer reviews)
This book is an ideal starting place for anyone researching the history of the development of the internet, and of the huge social chances it caused.
Comes with a floppy disk!

Click Here to see more reviews about: Using the Internet for Social Science Research and Practice



Buy Now

Click here for more information about Using the Internet for Social Science Research and Practice

Read More...

9/30/2011

Inside Network Perimeter Security (2nd Edition) Review

Inside Network Perimeter Security (2nd Edition)
Average Reviews:

(More customer reviews)
This review is for the 2nd edition of this book.
"Inside Network Perimeter Security" (INPS) by Northcutt, Zeltser, Winters, Kent, and Ritchey suitably covers the broad topic of securing a network's edge. The book is based, on part, from various SANS Institute training material (Northcutt is the CEO of the SANS Institute). Most of the items documented in INPS are honed from years of discussions in classes (and is mentioned an `excellent supplementary resource" for the GIAC Certified Firewall Analyst (GCFW)).
The book first focuses on perimeter fundamentals - including dedicating about 100 pages to the three main types of firewalls (Packet, Stateful & Proxy). The second section discusses how to fortify other areas of the perimeter - by implementing hardened routers and hosts, VPNs, IDSs, and IPS. The third section discusses designing a secure perimeter from the ground up (consider it best practices). This includes a much-needed chapter on wireless security. The last section is how to monitor and maintain the perimeter.
It is hard to characterize who this book should be aimed at. While configurations examples are given for many different platforms and OSs, the configs cannot be considered complete. I feel this book would serve network admins well as a starting point and as introduction to concepts that they might not be familiar with.
Some items I like from Inside Network Perimeter Security:
-Chapter 6 gives a great discussion on Cisco routers. What really impresses me is, since the documentation is from someone besides CiscoPress, you get an idea of other ways to harden Cisco routers (see the telnet trick on page 142). The first appendix also gives a great collection of different ACLs (consider it an update of the NSA's list). I have over 50 CiscoPress books, and information found in these 2 chapters I have not seen documented in any CiscoPress book.
-Chapter 21 provides a `quick' list of tools to use to help troubleshoot and isolate an issue. While there are some great books that are wholly dedicated to showing the ins-and-outs of different tools, sometimes you can't see the trees through the forest. Within just a few short pages, INPS is able to suggest a plethora of different tools to use based upon the issue.
The book mentions that it's goal "...is to create a practical guide for designing, deploying, and maintaining a real-world network security perimeter." I believe they have done just that!
I give this book 5 pings out of 5:
!!!!!

Click Here to see more reviews about: Inside Network Perimeter Security (2nd Edition)



Buy NowGet 37% OFF

Click here for more information about Inside Network Perimeter Security (2nd Edition)

Read More...

9/04/2011

CCNA Practice Questions (Exam 640-802) (3rd Edition) Review

CCNA Practice Questions (Exam 640-802) (3rd Edition)
Average Reviews:

(More customer reviews)
Reviews are always a bit subjective, but probably even more so with certification material like this book. I feel that this was a very effective book in my case so thats a 5 * to me.
First of all the CCNA Exam Cram assumes that you are involved in networking and your interest in obtaining certification, therefor the concentrate on giving you the Cisco specific information you need to pass. The biggest thing to recommend this series is what they are not.
The most popular book in the CCNA prep field seems to be the Lammle book which is 1000 pages and is really a time waster for someone who has been involved in networking for a few years. For instance Todd Lammle would say "Pay attention because this is very important" and then launch into 7 pages on how basic IP networking works. The experienced reader is then obligated to read through all of that looking for new information since Todd said pay attention, but then there is nothing new for someone who is in the field. Lammle's approach is valuable for someone with little experience or someone coming over from server admin, but the sheer bulk of Lammle (and the two Cisco press books at 700 pages each) make it difficult for the experienced student to just pick out the material that will be relevant to them.
In contrast Exam Cram CCNA (not this questions book) flags particular material as "Exam Tips" in a boxed sections and indicates that some material is "Highly Testable". In my experience with the exam they were exactly right- the type of material they flagged was exactly what was on the exam.
Here is the biggest reason for my recommendation of Exam Cram- the questions are hard enough to be useful to the student. The biggest problem in passing the CCNA Exam is know at what level you should be preparing. On a scale of difficult from 1-10 (devious) the questions in Exam Cram are pitched at 6-8 level. The Lammel book's questions are at a 4. The Actual Cisco exam is a 5-7.5. So even though Exam Cram is probably a bit more difficult than the actual exam it will prepare you for the multiple correct answer questions which can be tricky and for the indirect way Cisco tests your knowledge of some of the skills. For instance, Lammle might ask what a "desirable" mode is in trunking and give you 4 definitions to pick from, while the cisco exam will give you a interface config and will ask you how the switch port will behave based on some settings for a neighboring port.
Exam Cram also covers the following areas better than Lammle- STP designated port process, Wireless BSS/ISS and channel overlap, Security, IPv6. If you just followed Lammle there will probably be questions on your exam that you could not answer. In particular I had about 4 questions on STP designated ports that could not have been answered based on Lammle's treatment.
A word about the exam engine- I could suggest several improvements. It lets you test several different ways including a pop up display of the correct answer and a reasonably good discussion of the incorrect answers. This is very useful to the student. However the the exam scoring does not break down your score by book chapter, so you'll have to do that for yourself. The simulator engine is, as others have noted, atrocious as a simulator- there is no defending it as that. However- the fact that it sucks as a simulator doesnt mean that it isnt useful.
The exam engine will give you a scenario to configure, just like on the CCNA exam- for instance add ip's to a serial link, configure the link for rip v2 and advertise connected networks. The way the simulator engine works is it will prompt you for what subtask you are on and will only accept commands for that subtask before allowing you to go on. There is no auto complete and you can't use ? to see available commands at all. And there are no abbreviations allowed by the parsing engine. You must type "enable" and "configure terminal", no "en", "conf t". Ok this obviously sucks as a simulator- but as something that prepares you for the exam it works. If you can confidently configure things in the Exam Cram engine you will have no problem getting it done during the Cisco exam. Sometimes people get a little too comfortable hitting tab and ? and never really memorize the commands- that can cost you when you are in a timed test.
Another advantage of Exam Cram Questions is that it is a slim book that you can easily keep on you to peruse if you are at a sub shop and have some time. You cant really do that with a fat book like Lammle.
Summary- If you have been in networking for several years and are comfortable with subnetting and routing concepts go with Exam Cram book. You may want to do some additional reading in IPv6 as well. If you are coming to networking with little background or as a server admin use Lammel and at the very least buy Exam Cram Questions. You also should probably use the Cisco Press books for their chapters on VTP, STP, Wireless and IPv6.
Good luck!


Click Here to see more reviews about: CCNA Practice Questions (Exam 640-802) (3rd Edition)



Buy NowGet 39% OFF

Click here for more information about CCNA Practice Questions (Exam 640-802) (3rd Edition)

Read More...