Studying for Security+ | Secure Code Design and Implementation
I’m becoming more confident that studying for this certification isn’t going to be as difficult as I originally thought.
So far, the most difficult part is still all of the memorization of terms and acronyms. I’m starting to see how they try to trip you up. One of the quiz questions from this domain referenced TTP and how it is used for a research source (true or false). The statement was 100% true, other than the fact that they put”… TTP (terms, techniques, and procedures)” — which is false because it stands for tactics, techniques, and policies. I' have heard about little things like this that really trip people up so I’m learning how important it is to read the question a few times to make sure every part of it is true.
This is the same with questions like “you should always or never do X”. You really have to think about it because sometimes there are exceptions and other times there are not.
I’m getting through a domain in 1-3 days at my current speed of 2.5 hours per day. Most of the courses are 2-3 hours per domain but I’m frequently pausing (to catchup on notes) or rewinding because I didn’t understand the topic.
Anyway, notes are below.