国家公务员考试备考资料

Learn the basics of OS(Windows & Linux) architecture, and code weekly. Build a strong foundation in Networking and Operating Systems; Cisco Networking Essentials and the 3-course CCNA series were invaluable for me. For ethical hacking, watch TCM's free "Practical Ethical Hacking" course on YouTube. Once you've mastered the basics, practice meaningfully: Pentesting: Do bug bounties, join CTFs, and use TryHackMe/Hack The Box. Blue Teaming: Create a home lab with VirtualBox or VMware Player. Use VulnHub for practice and set up open-source security tools. Open Source: Contribute to Wireshark, Metasploit, and Nmap. That’s a solid start. Seek guidance from friends, mentors, colleagues, or communities on LinkedIn and other platforms if needed.

Um início interessante na área de seguran?a da informa??o é buscar conhecimentos básicos, através de cursos de longa dura??o, fazendo gradua??es em faculdades sérias ou, até mesmo, em cursos de curta dura??o para entender um pouco o "mundo da seguran?a", identificar-se nesta área junto aos seus propósitos de carreira e depois perseguir cursos mais especializados, a depender da sub-área que quer seguir. Conversar e trocar ideias com profissionais experientes também é um bom caminho. Coloque seus questionamentos, objetivos, propósitos, para buscar uma luz sobre o que você realmente quer seguir.

Start with the fundamentals to build a strong foundation. Books: "The Web Application Hacker's Handbook" by Dafydd Stuttard and Marcus Pinto "Hacking: The Art of Exploitation" by Jon Erickson Online Resources: What is Information Security? on CSO Online OWASP (Open Web Application Security Project)

Muitas vezes, o networking valerá muito mais que um diploma, ent?o lembre-se ter um bom networking é essencial. Atividades como CTFs, publica??es no Medium e Linkedin, projetos particulares e trabalhos freelance ajudam bastante no currículo. Essas experiências práticas demonstram seu compromisso e habilidade em resolver problemas reais. é importante também ter cuidado com a autossabotagem e n?o se cobrar excessivamente no processo de aprendizagem. Cada pessoa tem seu próprio ritmo e é fundamental respeitar o seu. Aprender novas habilidades e construir uma carreira leva tempo e paciência. Ao aceitar que o progresso é gradual, você evita o estresse e a frustra??o.

Familiarizarse con la terminología y acrónimos comunes en InfoSec es fundamental por varias razones: -Comprensión clara de las amenazas: Conocer términos como "phishing", "ransomware" y "DDoS" permite comprender mejor la naturaleza de las amenazas a la seguridad de la información. Esto facilita la identificación de posibles ataques y la toma de medidas para prevenirlos. -Comprensión de soluciones: Conocer la terminología relacionada con las soluciones de seguridad de la información facilita la evaluación y selección de las herramientas y tecnologías adecuadas para proteger la información.

- Subscribe to NetworkChuck & HackerSploit - Get PocketPrep for Security+ - Get Jason Dion Udemy Course for Sec+ - Study for a cloud cert (AZ-900 or AWS fund) - Talk to ChatGPT when you don't understand something

-> Get to know common terms like malware, phishing, encryption, firewall, and more. -> Understand industry-specific acronyms such as IDS, IPS, VPN, and MFA.

? Familiarize yourself with common cybersecurity terms and acronyms. Example: Learn what "malware" means (malicious software designed to harm your computer). ? Start exploring basic certifications like CompTIA Security+(This certification teaches you the foundational language and concepts of cybersecurity).

-> Set up a home lab using virtual machines to practice different security tools and techniques. -> Use platforms like Hack The Box or TryHackMe to engage in practical hacking exercises.

La teoría es esencial en la seguridad informática, pero la práctica es donde realmente se consolida el conocimiento. Aplicar la practica ofrece los siguientes beneficios: -Aprendizaje activo: Experimentar de primera mano conceptos y técnicas nos permite internalizarlos mejor. -Desarrollo de habilidades: Practicar nos ayuda a dominar las herramientas y técnicas necesarias para enfrentar amenazas reales. -Preparación para el futuro: Nos permite adaptarnos a nuevas amenazas y desarrollar las habilidades para combatirlas. Implementa prácticas básicas en tus dispositivos: -Instala un cortafuegos, configura una VPN y crea contrase?as seguras. -Explora con máquinas virtuales: Experimenta de forma segura diferentes ataques y defensas.

Don't pay at first; you can learn from free resources and build your own lab. You must solve lab problems to understand the attacks.

- Doing projects and posting. If you have 0 experience - Get on TryHackMe and just look up the writeup when stuck - Build a lab in the cloud (Use privacy(.)com to avoid cloud costs) - Docker also makes things very easy to build impressive projects fast

? Set up a home lab with virtual machines. Example: Create a safe, isolated environment on your computer to test security concepts. You can also explore web-based workspaces like TryHackMe or HackTheBox. ? Participate in capture-the-flag (CTF) challenges. Example: Solve cybersecurity puzzles, like finding hidden messages in websites. ? Experiment with basic security tools and learn to use a password manager to create and store strong passwords. ? Explore Security Blue Team website which practical and high-quality defensive cybersecurity training, certifications, and community events.

Understand the basics of networking Learn about OSI model Go deep into each layer Understand the protocols and how the data is transmitting

-> Learn about computer networks, including how data travels over the internet. -> Understand how to secure networks using firewalls, VPNs, and intrusion detection/prevention systems.

Definitely take some sort of networking so that you understand communication between devices and how as well as when to prevent her allow those communication

As a beginner interested in learning about Information Security: network basics, OSI Model in details and attacks on each layer and how to secure it.

Get a CCNA for Dummies book. It isn't as thorough as other networking books, but it'll get you smarter on the topic faster. Now move on to Network+ for Dummies - this book is more focused on how to network Microsoft devices together. Feel free to pursue the certs. The irony of Network Security is that networking is a discipline focused on connectivity of devices and security is focused on limiting connectivity between devices. Irony. Now build a pigeon coop on your rooftop and start training carrier pigeons. You'll need feed and chicken wire. If anyone asks you what you're doing DO NOT tell them you are holding children captive. That is bound to draw unwanted attention.

Independente da sub-área que você quer seguir e se especializar dentro da seguran?a da informa??o, é muito importante que o profissional da área conhe?a políticas, normas e procedimentos de seguran?a. Ainda que você vá atuar na área técnica da seguran?a, é fundamental conhecer algumas normas ISO de seguran?a, a exemplo da ISO/IEC 27002, 27001 e 27032. As Organiza??es devem ter (ou deveriam ter) uma base normativa que especifique diretrizes de seguran?a sobre suas responsabilidades relacionadas à prote??o de dados pessoais e informa??es corporativas. E, neste caso, os profissionais de seguran?a devem conhecer as diretrizes de seguran?a, para aplicar nas tecnologias disponíveis, em treinamentos para funcionários e em processos.

- If interested in GRC just ask YouTube - "GRC projects" - Get some ideas and start writing policies of your own - Do an assessment on some vulnerable machines - Ask ChatGPT to give you some project ideas - Not all will be great but will definitely point you in the right direction

? Study best practices for creating and implementing security policies. Learn how companies decide who can access certain information with framework such privacy by design. ? Learn about various compliance frameworks (e.g., Eu-GDPR, HIPAA, ISO etc..). Understand laws that protect your personal/sensitive data or medical information. Differentiate between legal and ethical security laws and regulations. ? Understand the importance of incident response plans. Learn how organizations prepare to handle a data breach and also research on case studies of past incidents.

I have started my journey in cyber security domain by completing my bachelor degree in computer science. Later on I did some research about this domain on the internet then I started to watch some tech YouTube channel to understand correct road map, then completed some global certification to improve my skills.

Subscribe to Newsletters: Stay informed by subscribing to cybersecurity newsletters like Krebs on Security, The Hacker News, and SANS NewsBites. Webinars and Virtual Conferences: Attend webinars & virtual conferences such as Black Hat, DEF CON, and RSA Conference to gain insights from experts & stay ahead of the latest trends and technologies. Communication Skills: Improve your communication skills by writing clear, concise reports & practicing presentations. Mentorship and Networking: Find mentors through LinkedIn or professional organizations like (ISC)2. Join local cybersecurity meetups, participate in online forums, & attend industry events to network. Home Lab Setup: Set up a home lab to practice penetration testing and forensics.

I would suggest starting with the basics of cybersecurity through free online resources like YouTube, Coursera, or Udemy. This will help you grasp fundamental concepts and terminologies. If you find the subject matter engaging and understandable, pursue entry-level certifications like the ISC2 Cybersecurity certification, which are tailored for beginners and is free. Follow this with CompTIA Network+ to understand networking, crucial for security, and Security+ for a broader foundation in information security. Once you have a theoretical base, gain practical experience through platforms like TryHackMe or HackTheBox, which offer gamified learning and real-world scenarios to solve rooms, learn new Tool and capture-the-flag (CTF) challenges.

Don’t sell yourself short anyone is capable of achieving anything if they give it a shot. Nobody can know everything all at once so include as many different sources of knowledge as possible and know when to ask for help.