Have you ever sweated bullets sitting a computerized certification exam? Or are you someone who hasn’t taking any exams yet and is fearful of what you might find? Have no fear! This [...]]]> If you haven’t already done so, I recommend reading the “Pass Any Certification Exam” article first. Then move on to this article.

Have you ever sweated bullets sitting a computerized certification exam? Or are you someone who hasn’t taking any exams yet and is fearful of what you might find? Have no fear! This article is designed to help you take exams confidently. The techniques listed herein have helped thousands of my readers and students. Apply them!

I’ve taken many a certification exam over the years. If you are preparing for an exam currently, I know what you are going through. To make exams a bit easier on my students and readers, I developed some exam-taking techniques. These techniques are things I have learned over the years either from taking the exams myself, or by trying to come up with some helpful solutions for students. Keep in mind that this list deals more with computer certifications. But most of the techniques should be helpful for many of the different types of exams you might encounter in the future.

First, let’s talk about some good general practices for taking exams:

• Pick a good time for the exam: It would appear that the least amount of people are at test centers on Monday and Friday mornings. Consider scheduling during these times. Otherwise, schedule a time that works well for you, when you don’t have to worry about anything else. Keep in mind that Saturdays can be quite busy. Oh, and don’t schedule the exam until you are ready. I understand that sometimes deadlines have to be set, but in general, don’t register for the exam until you feel confident you can pass. Things come up in life which can sometimes get in the way of your study time. Keep in mind that most exams can be cancelled as long as you give 24 hours notice (check that time frame when registering to be sure.)

• Don’t over-study the day before the exam: Some people like to study hard the day before; some don’t. My recommendations are to study off of the cheat sheet you created, but in general, don’t overdo it. It’s not a good idea to go into overload the day before the exam.

• Get a good night’s rest: A good night’s sleep (7 hours to 9 hours) before the day of the exam is probably the best way to get your mind ready for an exam.

• Eat a decent breakfast: Eating is good! Breakfast is number two when it comes to getting your mind ready for an exam, especially if it is a morning exam. Just watch out for the coffee and tea. Too much caffeine for a person who is not used to it can be detrimental to the thinking process.

• Show up early: Both testing agencies recommend that you show up 30 minutes prior to your scheduled exam time. This is important; give yourself plenty of time, and make sure you know where you are going. You don’t want to have to worry about getting lost or being late. Stress and fear are the mind killers. Work on reducing any types of stress the day of and the day before the exam. By the way, you really do need extra time because when you get to the testing center, you need to show ID, sign forms, get your personal belongings situated, and be escorted to the your seat. Have two forms of ID (signed, one with photo) ready for the administrator of the test center. Turn your cell phone or smartphone off when you get to the test center; they’ll check that, too.

• Bring ear plugs: You never know when you will get a loud testing center – or worse yet, a loud test taker next to you. Ear plugs help to block out any unwanted noise that might show up. Just be ready to show your ear plugs to the test administrator.

• Brainstorm before starting the exam: Write down as much as you can remember from the cheat sheet before starting the exam. For most exams, the testing center is obligated to give you something to write on; make use of it! By getting all the memorization out of your head and on “paper” first, it clears the brain somewhat so that it can tackle the questions. I put paper in quotation marks because it might not be paper; it could be a mini dry erase board or something similar.

• Take small breaks while taking the exam: Exams can be brutal. Generally, you have to answer one hundred questions while staring at a screen for an hour or more. Sometimes these screens are old and have seen better days; these older flickering monitors can cause a strain on your eyes. For this and other reasons, I recommend small breaks and breathing techniques. For example, after going through every 25 questions or so, close your eyes, and slowly take a few deep breaths, holding each one for 5 seconds or so, and releasing each one slowly. Think about nothing while doing so. Remove the test from your mind during these breaks. It takes only ½ a minute but can really help to get your brain refocused. It’s almost a zen type of thing, but for me, when I have applied this technique properly I have gotten a few perfect scores. It’s really amazing how the mindset can make or break you.

• Be confident: You have studied hard, gone through the practice exams, created your cheat sheet – done everything you can to prep. These things alone should build confidence. But really, you just have to be confident for no reason whatsoever. Think of it this way: you are great… I am great… (to quote Dr. Daystrom.) But really, there is no disputing this! That’s the mentality you must have. You are not being pretentious about this if you think it to yourself. Acting that way to others… well that’s another matter. So build that inner confidence and your mindset should be complete.

Now let’s talk about some methods to use when faced with difficult questions. The following methods can be used in the face of all difficult questions.

• Use the process of elimination: If you are not sure about an answer, first eliminate any answers that are definitely incorrect. You might be surprised how often this works. This is one of the reasons why it is recommended that you not only know the correct answers to the practice exams’ questions, but also know why the wrong answers are wrong. The testing center should give you something to write on; use it by writing down the letters of the answers that are incorrect in order to keep track. Even if you aren’t sure about the correct answer, if you can logically eliminate anything that is incorrect, then the answer will become apparent. To sum it up, the character Sherlock Holmes said it best: “When you have eliminated the impossible, whatever remains, however improbable, must be the truth.” There’s more to it of course, but from a scientific standpoint, this method can be invaluable.

• Be logical in the face of adversity: The most difficult questions are when two answers appear to be correct, even though the test question only requires you to select only one answer. Real exams do not rely on “trick” questions. Sometimes you need to slow down, think logically, and really compare the two possible correct answers. Also, you must imagine the scenario that the question is a part of. Really think through step-by-step what is happening in the scenario. Write out as much as you can. The more you can visualize the scenario, the better you will be able to figure out which of the two answers is the best one.

• Use your gut instinct: Sometimes a person taking a test just doesn’t know the answer; it happens to everyone. If you have read through the question and all the answers and used the process of elimination, sometimes the gut instinct is all you have left. In some scenarios you might read a question and instinctively know the answer, even if you can’t explain why. Tap into this ability. Some test takers write down their gut instinct answer before delving into the question and then compare their thoughtful answer with their gut instinct answer.

• Don’t let one question beat you! Don’t let yourself get stuck on one question. Mark it, move on to the next question, and return to it later. When you spend too much time on one question, the brain gets sluggish. The thing is, with these exams you either know it or you don’t. And don’t worry too much about it; chances are you are not going to get a perfect score. Remember that the goal is only to pass the exams; how many answers you get right after that is irrelevant. If you have gone through your training process thoroughly, you should be well prepared, and you should have plenty of time to go through all the exam questions with time to spare to return to the ones you skipped and marked.

• If all else fails, guess: Remember that the exams might not be perfect. A question might seem confusing or appear not to make sense. Leave questions like this until the end, and when you have gone through all the other techniques mentioned, make an educated, logical guess. Try to imagine what the test is after, and why they would be bringing up this topic, vague or strange as it might appear.

And when you have finished:

• Review all of your answers: Use the time allotted to you to review the answers. Chances are you will have time left over at the end, so use it wisely! Make sure that everything you have marked has a proper answer that makes sense to you. But try not to over think! Give it your best shot and be confident in your answers. You don’t want to second guess yourself!

Hope that helps all of you. If you would like to take this further, I listed a few books that might be of service below:

Let’s face it, credentials help a person to get ahead. A resume that balances credentials such as a college degree and certifications, along with actual field experience, will be the strongest resume by far. So credentials are important, and one easier way to get credentials is to sit certification exams. This article breaks [...]]]>

Let’s face it, credentials help a person to get ahead. A resume that balances credentials such as a college degree and certifications, along with actual field experience, will be the strongest resume by far. So credentials are important, and one easier way to get credentials is to sit certification exams. This article breaks down how to pass an exam into 8 steps. It also covers some exam-taking tips and tricks I have learned over the years.

While this article concentrates on computer certification exams, the principles can be applied to just about any certification exam. From my experience of teaching over 3000 students over the years I’ve been able to boil down how to pass any certification exam into the following key steps:

1. Study Diligently

2. Learn from more than one authority

3. Go to “the source”

4. Concentrate on the hands-on

5. Test everything you do

6. Use powerful and compelling exams

7. Create a “cheat sheet”

8. Use smart techniques when taking the real exam

Let’s talk about each of these in more depth.

1. Study Diligently!

This is pretty straight forward: study hard! But it needs to be reiterated often. More importantly is to study smart. Quality study is far more beneficial than quantity study. For example, take 2 people studying the same specifications for an i7 CPU (memorizing CPU specs is fun right?!) Each one is detailed below:

Student A studies for 20 minutes at home, where phones might be ringing sporadically, someone is watching TV in the other room, and the person’s e-mail is open and receiving (beeping and booping and so forth.) After spending a full 20 minutes attempting to memorize the i7 CPU specs, student A figures that it is all down pat, and doesn’t bother to quiz, after all, the person spent 20 minutes!

Student B studies in a quiet library with cell phone off, and virtually no distractions. This person studies the specifications for 5 minutes, including quizzing on the content, either with questions, flash cards, or another method. When satisfied with the recall of the content, student B moves on to another concept.

It’s a pretty obvious comparison, but a scenario that is often overlooked. Personally, my computer lab sounds like seven R2-D2s having a conversation (albeit an annoying one) – it is not the optimal place for research or study. When I have something important to investigate or study, I mute or disable as much as I can, or I take a laptop on the road to another location. And I understand fully that life happens to all of us. Sometimes we don’t have the proper resources, or can’t take the time to prepare how we will study effectively. But preparation is the key. A few minutes of preparation time can save an hour of wasted time later on.

Now, getting back to the previous example, note the time difference. 9 times out of 10, the person who studied 5 minutes will retain the information better over the short term and the long term. The person studying for 20 minutes has incorporated a lot of other information into their brain, information that insinuates itself into the i7 CPU specs, making the memorized information more chaotic, and harder to recall. Now, note I said 9 out of 10 (and this is approximate), because there is the uncommon person who studies better with distractions, and white noise. This is somewhat synonymous with the person who thinks better on their feet! And sometimes, you just don’t have a choice in the matter, and have to study in a less than perfect environment. The key is to limit distractions as much as possible. Now, you must also “know thyself”. For example, some people study with a high rate of retention while listening to music or other structured distractions. Music allows for other types of mental connections and recollections that would not otherwise be available. I’m one of these people, but not all the time. I’ve learned when music can help or hinder. Finally, “a man’s got to know his limitations”. Take breaks often, and know when it’s time to quit. If you have to re-read something 3 times, it’s time for a breather! Be careful with cramming, it’s not something that the average person can do everyday.

Of course these principles only scratch the surface of good studying, so I left a few links below to books on Amazon that can improve your study skills greatly.

And finally, studying diligently is all well and good, but could be a total waste of time if you aren’t studying from the right sources. That brings us to number 2.

2. Learn from more than one authority

Always use more than one authoritative source. You don’t want to put all your eggs in one basket. By using more than one source to study from, you gain insights from multiple experts. If you study correctly, this could amount to an exponential increase in knowledge, by combining insights from each of the experts.

Be careful who you decide to learn from. There is a slew of misinformation in the IT field. Unfortunately, it’s the nature of the beast. The authority you decide on will depend on what type of training you are doing: self-paced books, computer-based and instructor-led. I have some experience in each of these. So let’s break them down:

Self-paced books: This means IT books that you can study from at your own pace. It is the bulk of the market when it comes to computer certification study. I’ve had dealings with several publishers in the IT field and can tell you that there are a lot of sub-par publishers out there. In most cases I recommend a well-established publisher: for example, Pearson (who I currently write for exclusively) , McGraw-Hill, or O’Reilly. In my opinion, these are professional companies that deliver authoritative IT texts. By utilizing an organized set of checks and balances that includes Development Editors, Copy Editors, Proofreaders, and a Project Manager, you can be assured of a quality text. Then, depending on the author, it could go from good to great. Of course, you occasionally see very good books from smaller publishers and even self-published authors, but it is definitely less common.

Computer-based training (CBT): Computer-based training is self-paced training that you accomplish on the computer. CBTs could come on disc or be downloaded and are usually much more expensive than traditional self-paced study guides. They could be in video format, flash-based interactive training, or incorporate a mixture of the two. CBTs are meant to take the place of actual IT courses, but usually fall short of the mark. I recommend caution when using these, and only recommend them to people who have some experience in the particular subject already.

Instructor-led training (ILT): Instructor-led training means sitting a typical onsite class, or taking an online course. Either way, a real teacher guides you through the course in a methodical manner. Onsite classes are the best, especially if you need to learn about PC hardware or how to connect networks, and need that real hands-on experience. But online courses have made a lot of progress over the past decade. They work well for more technical classes with less actual hands-on.

Again, whatever your method, I always recommend learning from more than one source. This could mean two study guides, or an onsite course plus an additional study guide, or a CBT and a self-paced book. Do your due diligence and research what is out there. I even tell my students and readers to get a second study guide even if they are using one of my books! For example, if a reader is learning from my A+ Exam Cram and they are new to the IT field, I also recommend the A+ Cert Guide which goes into more depth, and is very useful to people just starting out. By using both books, the reader gains a broader foundation of knowledge.

3. Go to “the source”

When you are researching information, go to the source of the information. For example, if you are interested in a particular Intel motherboard’s capacity for RAM, go to www.intel.com, or a reliable RAM manufacturer such as Kingston. This applies to any technical information, and also if you have technical questions. For example, if you do not know how to turn off User Account Control in Windows 7, use the built-in Help program in Win7, or go to one of Microsoft’s websites. Or whatever vendor you are dealing with: Cisco, CheckPoint, Motorola… whoever!

I specifically don’t answer technical questions on my website because I realize it is my job as a teacher to show students and readers where to go for the information. “Teach a man to fish” as they say. That’s exactly what I’m doing. Teaching you to fish for information. It empowers you, and makes you self-reliant, and a much better and efficient technician. Generally, if you apply this rule, you should not need to go to any third-party tech support forums with questions. They might work as a last resort, but should not be your primary way of getting answers. I write more about this in the article: How to Find The Answers.

This brings up a sore point with some people: Wikipedia. In most technical circles, it is not considered a valid source. However, sometimes it might be a good starting place, since proper articles on Wikipedia will often cite proper sources. By accessing the sources that the Wikipedia article cites, you might find legitimate information quicker than if you were to search in other ways. Many, many people contribute to Wikipedia, but the same benefits that can be brought by these numbers can (and do) bring chaos as well. I have had to correct and guide many upcoming technicians who became confused by Wikipedia articles for one reason or another. Your best bet is to stick to real sources of information.

On another note, some people don’t realize that most software comes with free technical support. For example, Microsoft operating systems allow for X amount of case studies. If you bought Windows 7 outright (retail box), I believe you get 2 free cases per OS. A case is when Microsoft helps you solve a problem with the software, no matter how long it takes. If you call in and level 1 support can’t help you, ask for level 2, and then level 3. I’ve stumped level 3 in the past and had to come up with some crazy workarounds, but this is rare. More often than not Microsoft will be able to help you quickly. The majority of problems you will call about are well know to Microsoft, and are probably well documented on their website. (Keep in mind that if you bought your computer from a vendor such as Dell or HP you would have to call them for tech support, not Microsoft.) Most other software vendors offer this type of support as well. Generally I go to the vendor’s website for answers first, then call in if necessary. If that doesn’t work, I’ll look elsewhere for answers, or come up with my own solution! But be careful with your own solutions. Make sure they are safe, and won’t affect your other systems or areas of your network. Be sure that any solution is secure and is tested thoroughly before implementation. Also, keep good documentation of the entire process. But I digress…

4. Concentrate on the hands-on

Memorizing facts is great. But in order to make a name for yourself in the IT field, you need to understand how the real world works. Hands-on examples, and real-world scenarios are the only way to go. Also, when you learn the hands-on, it helps to make the facts stick in a more cohesive way, and for a longer time. Build that home lab: Computers, networking equipment, routers, WLAN equipment, books, CBTs, and so on; the investment will payoff for you in the long run. But be budget conscious! Home labs can break the bank if you are not careful. Watch for sales, use e-bay and inexpensive Amazon vendors. Look for good deals whenever making purchases. Go to computer shows. Make use of other people’s equipment or labs, libraries, or you local schools. If you take classes at a technical school, inquire as to whether they have a lab for you to practice in – the good ones will provide this for you.

5. Test everything you do

Whether you are configuring a router, modifying the registry, reading a chapter, taking a practice exam, or what have you, test what you accomplished or what you have learned. Make sure it worked out the way it was supposed to. Test the configurations. Quiz yourself. Test yourself by using reverse engineering, flash cards, or have someone else test you! This method not only protects you at the workplace, but reinforces everything you learn and do. I really can’t stress this one enough. Students and readers often forget to test. And it can be the most costly item to forget in terms of time, resources, and your good name.

6. Use powerful and compelling practice exams

Practice exams should be similar to the real certification exams, but not exact. The idea is for a person to learn the concepts, not just memorize the questions and answers. The questions should have in-depth answers and explanations, with remediation back to a particular section and chapter, or at the very least, links to other resources of more in-depth information. I insist on this in my books, and don’t recommend any products that don’t incorporate this line of thought. If you are wondering whether a particular vendor applies these types of principles, you can find out by checking www.certguard.com. They evaluate many IT learning vendors. Just type in the domain name of the vendor in the search field and you will get results showing a safe or unsafe (braindump) rating.

I normally recommend at least three 100 question practice exams when studying for a particular exam. If you can’t pass with 85% or higher on the first try, keep studying and retake the exam. Don’t move on to the next exam until you have reached that 85% mark. If by the last exam you are not passing with 85% on the first try, you might want to consider additional practice exams, perhaps from another vendor. Or you might need to study more. Be very careful at this stage, it is the most important stage when studying for an exam. Take your time, and make sure you understand the underlying concepts in depth. Memorization and braindumps are never a good idea. You might pass the exam, but will quickly forget what you have learned. People that study in this manner are known as “paper techs” or “paper tigers”. A common name back in the day was “paper MCSE” referring to people who memorized answers to the older Microsoft systems engineer exams. Acquiring certifications in this manner might get you in the door to an interview, but your lack of hands-on knowledge will quickly get you out the door. Unfortunately, I have seen it all too often – as a network manager in charge of highering techs, to an instructor hearing the woes of particular students. So study hard, and know the concepts. If you do, you will be able to answer any question related to the concept, whether it is when you sit the exam, or during an interview!

7. Create a “cheat sheet”

This is probably the best advice I can give. One day a student of mine was getting a bit flustered with everything that needed to be studied for a Network+ exam. He said to me, “I wish I could just cheat”. It got me thinking… No I don’t condone cheating, and although it would be relatively easy at most testing centers, it wouldn’t help a person in the long run. But the wheels were turning. If you can’t cheat, what would the next best thing be? Creating what I call a “Cheat Sheet”. This is a distilled version of all the most important facts that need to be memorized for the exam. Something that you could keep in your pocket, read on the train, even bring to the testing center and study from while you are waiting to take the test. Of course, you can’t bring something like this into the actual testing room, but you can study right up to that last moment! Then, when you get into the testing room, write down as much as you can remember from the cheat sheet before you begin the exam. This is perfectly legal and allowed. The testing center is required to give you something to write on (for most exams), make use of it! My A+ Exam Cram (and all the Exam Cram books) offer a Cram Sheet in the beginning of the book in tear out form. It’s a great tool, but I also recommend making your own little cheat sheet that you devise. It’s a fact: The act of writing down key information helps you to memorize it.

8. Use smart techniques when taking the real exam!

Use your noodle when taking the exam. Don’t rush, and don’t be lazy. Get a good night sleep, eat a good breakfast the days of, show up early, and patiently examine each question. In my opinion, and from my experience, these are the best ways to pass. I go into more depth in this article: Exam Taking Techniques. Most of all, be confident. Your confidence level can make or break you in all parts of life.

Good luck on those exams! But with all the information you have acquired, it’s a lot less luck, and a lot more skill!

So I’d like to say “Good skill to you!”

David P.

First, let me explain why I don’t answer technical questions on this site (other than [...]]]> This article is intended to help you learn how to find technical answers on your own. I’ll be expanding on this post as time goes by. But for now I’ve listed some of the basic rules I live by below.

First, let me explain why I don’t answer technical questions on this site (other than ones specifically related to my books/videos).
The main reason for this is the fact that everyone who reads my books should learn how to research answers on their own. Without that skill, a person will have a difficult time in the IT field. The ability to solve problems on your own is of paramount importance. So in good conscience, I cannot answer tech support questions on this site. Instead, I realize that my job as a teacher is to show how to get the answers you seek.

So let’s give some tips about how to go about investigating questions and finding the answers you are looking for. These are not necessarily in order. It will depend on what type of issue you encounter.

1. Define the problem: Sometimes, the real problem lies in the fact that the user can’t explain what the issue is properly. So, attempt to define the problem in a scientific way. Try writing down what you are doing step-by-step, and what actual issue happens. Be descriptive. Just so you know, 1/2 the time, students and readers of mine figure out the problem by doing this. Use the 6 step troubleshooting process in my A+ Exam Cram to help organize your troubleshooting process.

2. Search for an answer at the manufacturer’s website: GO TO THE SOURCE! If it is a problem with Windows 7, go to the Microsoft website. (but Dave, Windows 7 is perfect! Right? Microsoft Help and Support and the Microsoft TechNet are all free! Personally, I find the answers to more than 90% of my Microsoft questions on one of those two websites. This concept applies to any hardware or software. If it is an Intel motherboard problem, hit their site, if a Linux problem, go to a Linux site, if a Call of Duty problem, stop playing

3. Ask a co-worker: If the problem occurs at work and is work related, ask a co-worker. Part of an employee’s job is to share information. But keep the question within limits. Basic questions that a co-worker can easily answer should be asked of them first before even searching a manufacturer’s website. For example, “Which oscilloscope config are you using for that test?” It would be silly to search the web for something specific to your company. However, more detailed questions should be delayed until you have at least tried to research it for yourself. For example, “How do I setup a policy for an organizational unit in Windows Server 2008?” This question is Microsoft-centric, and not specific to your company. So you should do your best to find the answer before addressing a co-worker in this case.

You can also ask people you know. For example, I have a group of “friends” that I keep on my Rolodex (what?!?), whatever my Rolodex happens to be at the current time: Outlook e-mail, ICQ, smartphone, Yahoo group, Facebook, whatever it is you kids use… . Anyways, this group consists of experts that I am acquainted with, some people who know Checkpoint systems, others who know about Motorola handheld computer displays, and so on. But it’s a two-way street. The exchange of information has to go both ways for the relationships to work.

4. Search for an answer via search engine: Sometimes, this method works better first, but I don’t recommend it first in most cases for two reasons: One, you should get to know how to navigate the manufacturers’ websites, and two, the search engine could give you a bunch of results of people asking the same exact question, with no answers being given! This is common with more advanced problems.

5. Ask the question at a tech support site: There are tons of tech support sites out there. TechRepublic, Tom’s Hardware, Geeks to Go, and so on… Experienced tech support people avoid these sites, because they know the golden rule: GO TO THE SOURCE. But they might be necessary. Just don’t use them as a crutch.

If you do post, be prepared to specify details about the problem, for example:
- what type of computer (laptop, PC)
- OS version, SP level
- Software affected, network area affected
- and a descriptive account of the problem. I guarantee you, the more descriptive you try to be, the more chance you will figure out the problem on your own!
Either way, the more details you can give when asking a question, the more the possibility that someone can help you…

Once again, the exchange of ideas is important. If someone answers one of your questions on a tech support website, be sure to answer one of someone else’s questions on that same site at some point in time. I’ve frequented TechRepublic for years now, so that I can answer questions. Less as of late due to workload, but it’s one of my ways of giving back I suppose…

Hope this article has been of some help to you. And as I mentioned, I’ll be adding to it as time goes by.

Important changes with SP1

First, you may remember the newer XPS feature mentioned in the A+ Exam Cram Chapter 13 “Printers.” This feature is meant to [...]]]> Windows 7 Service Pack 1 was released in February of 2011. It addresses many issues concerning third-party software compatibility, drivers, and adds support for various new protocols and services.

Important changes with SP1

First, you may remember the newer XPS feature mentioned in the A+ Exam Cram Chapter 13 “Printers.” This feature is meant to replace the enhanced metafile print spooler. However, many users were reporting bugs dealing with the orientation of documents when viewing and when printing with XPS. SP1 addresses these and mixed orientation document issues. This could be the most important portion of the SP1 updates concerning the A+ exams. XPS printing is being used more and more, so you need to understand that SP1 is a critical fix for organizations using XPS functionality.

Next, some users had issues with hardware interfaces and devices, for example HDMI audio devices. Namely, losing the device after certain computer reboots. This has for the most part been fixed, but will depend on the HDMI device. Another issue that has been fixed for many video cards is one dealing with multiple monitor configurations. If a user has a PCIe x16 video card with two monitors connected (spreading the desktop across two screens) they might encounter loss of one screen or the other (or even both in some cases) when connecting other hardware to a USB port, sound port, or Firewire port. Many of these issues have been corrected. this particular issue would happen if you utilized the same GeForce GT260 card I used in the A+ Exam Cram in a multiple monitor setup. I haven’t tested this fix personally as of yet on that particular computer, but once I do I will amend this article.

On to some software issues. Users reported issues with older software. For example, Macromedia Dreamweaver MX does not create tables in Win7 (was also an issue in Vista), or third-party camera software doesn’t work properly. Many of these third-party issues can be fixed with an update to SP1. But in some cases, the third-party software will need an update, or a new version unfortunately.

Windows 7 SP1 fixes bugs and has additional support for identity federation services communications. Third-party services that are based on technologies such as the Windows Identity Foundation and the WS-Federation specification allow for identity and authentication information to be transferred from user to user, or company to company in a more secure manner across different protocols.

Windows 7 (and Windows Server 2008) SP1 adds support for Advanced Vector Extensions or AVX which are 256-bit instruction sets for processors, adds improved support for Advanced Format 512e for storage devices, and improves upon IKEv2 (for authentication during RRAS/IPsec connections.) Also, Restore previous folders at logon has been updated to represent original folder positions.

Of course, that just scratches the surface. There are 796 total security updates and hotfixes. To find out more about these check out the following links:

http://technet.microsoft.com/en-us/library/ff817622(WS.10).aspx

http://www.microsoft.com/downloads/en/details.aspx?FamilyID=61924cea-83fe-46e9-96d8-027ae59ddc11&displaylang=en

Assessing the service pack level and updating

To find out your service pack level in Windows 7 click Start, then click Computer. Next, right-click Properties and the System window will appear. Look under the Windows edition section and you will see the type of Windows 7 you are running and the SP level. If you do not see anything listed about a service pack, then you are not running one and should most likely update your computer. In a network environment, you must test the update first before deployment, and whether or not you use SP1 will be based on many factors. But in general, the individual user should update their system. You can also find out your SP level by going to the Run prompt and typing Winver, or going to the Command Prompt and typing Ver. Again, if no SP is listed, then you are not running one, otherwise informally known as SP0.

For the individual user, the SP can be automatically downloaded and installed if you have configured Automatic Updates. This is the easiest way for the average user. See this link for a step-by-step on how to do that. You can also access Windows Update on the web at this link. That should automatically open up the Windows Update window on your computer as well. Of course, to open Windows Update directly on your computer, click Start > All Programs > Windows Update. For more about service packs and Windows Update, see Chapter 9 in my A+ Exam Cram 5th edition.

You can also download the service pack in .exe, .msi, or .iso format from the following link:

http://www.microsoft.com/downloads/en/details.aspx?FamilyID=c3202ce6-4056-4059-8a1b-3a9b77cdfdda

These various packages can be helpful if you need to deploy SP1 to multiple computers. Your particular environment will dictate which file you should download. Before downloading, I recommend reading the article at the following link:

http://support.microsoft.com/kb/2505743

Hope this information helps you. I know I personally have gotten a lot of questions from students and readers about SP1 for Win7, almost as many as when we were waiting for SP1 for Vista. If you are having a hardware issue, software compatibility issue, or need better XPS printing functionality, look into SP1. But make sure that it addresses your needs before installation, especially if you are doing this on a computer within your organization. Your organization might have a policy about SP1. Some companies do not want to install it for various reasons. And all organizations will have procedures that you must follow (especially testing) before deploying SP1.

Screencast 1: Configuring Windows Vista for Hibernation and Sleep

Screencast 2: Setting up a Multiple Monitor Configuration in Windows Vista

Screencast 3: Using Windows Vista Hidden Programs

Screencast 4: Troubleshooting Memory and Hard Drives in Windows Vista

Enjoy!

DNS Server Configuration: http://www.informit.com/articles/article.aspx?p=1578520

Enjoy!

First let’s give a short description of each:

• Cryptographic hash functions: This is a procedure that [...]]]> I often get this question from students: “What’s the difference between MAC, Hashes, and Digital Signatures?” So I thought I’d write a short article about it. For more about these topics, get my CompTIA Security+ Cert Guide today!

First let’s give a short description of each:

• Cryptographic hash functions: This is a procedure that calculates a fixed-size bit string (hash value) from a piece of data. If the data is changed while it is in storage or in transit, the hash value will also be changed. This allows a person to verify whether the data has been tampered with. often, the data will be called the “message”, and the hash value will be called the “message digest” or “digest”.
An example would be to take basic text as data, such as the sentence “Study hard for the Security+ exam!” and calculate a hash from that data. The hash will be different every time it is calculated, but a typical example of the hash output would be:

8FD8 6CD1 CBE2 18DE AEFE
1799 76B1 79A9 B121 BCF8

When a file is downloaded from a website, the file can be checked against the hash (for example an MD5 or SHA-1 hash) that is often listed next to the file download link. If the original hash and the downloaded file’s hash are the same, you can be fairly sure the data hasn’t been tampered with. If they are not the same, the downloaded file should be discarded as it has probably been compromised. Cryptographic hash functions can be used in conjunction with digital signatures and MACs as well.

• Digital Signatures: These are mathematical processes for proving the authenticity of a document or message. A proper digital signature implies that the message or document was created by the actual sender and not someone else. They are commonly used to prove that an electronic signature (a person’s actual signature performed on the computer) is authentic. They use asymmetric cryptography.

• MAC (Message authentication code): This is a small piece of information used to authenticate a message. The MAC algorithm takes a message and secret key and outputs a MAC value or “tag”. MACs only use secret keys, and rely on symmetric encryption. However, to function as intended the MAC must be able to resist plaintext attacks even if a hacker knows the secret key. Although the hacker can create their own MACs from the key, the MAC algorithm must be strong enough to make it impossible for the hacker to calculate the MAC for other messages. MACs can be built from hash functions; these are known as keyed hash functions.

Now, let’s cite some of the differences between the three:

• A MAC can be a cryptographic hash function (as in keyed hash functions), but a cryptographic hash function is not always a MAC.

• Digital signatures can be used in conjunction with cryptographic hash functions (as in SHA-1 and the Digital Signature Algorithm), but a cryptographic hash function is not always a digital signature.

• Digital signatures utilize asymmetric cryptography, whereas MACs use symmetric cryptography.

• Digital signatures provide for non-repudiation, whereas MACs do not, and cryptographic hash functions usually do not.

• MACs require additional security requirements than cryptographic hash functions, for example, the MAC must be resistant to plaintext attacks.

Hope this helps some of you!
I’m sure I’ll be adding to this article when I have more time.

One of my associate’s websites was hacked into. He contacted me to see if I knew anything about a Web Shell. He had found that name [...]]]> The C99Shell (and its cousin web shells) can be devastating. This is an extension article that stems from Chapter 2 of the CompTIA Security+ SY0-301 Cert Guide (2nd Edition).

One of my associate’s websites was hacked into. He contacted me to see if I knew anything about a Web Shell. He had found that name within the syntax of one of the “new” files on his web server.
I told him that I had seen this before in several permutations: C99, C Shell, Web Shell, Web Shell by Orb, and others. He wasn’t too happy when I told him that the person who installed this has full access to his web server! However (luckily for him) once we fixed the problem, he restored from backup without a hitch. Other customers of mine in the past weren’t so lucky.

What is it? These web shells are programs that are installed on the web server by an attacker, and are used to remotely access and re-configure the server without the owner’s consent. They are remote access Trojans, but are also referred to as backdoors, since they offer an alternative way of accessing the website for the attacker.

How it got there: Most likely, the hacker stole my associate’s FTP password. Once the hacker had the password, it was just a matter of uploading the shell. Then the hacker could login through the new web shell, and do just about anything they wanted to the web server.

Why the web hosting company didn’t notice: Many of these web shells allow the operator to access them through a proxy, thus hiding the location of the operator. Also, the shell can be bound to specific ports, and the information can be encrypted and hashed.

What were my recommendations to my associate?: First I told him to increase password security for all important FTP accounts. I recommended making the passwords as complex as the web server would allow. Then, I recommended removing any unnecessary FTP accounts. Next, I recommended to delete the original RAT files and run a full scan of the system, or, to restore from an older backup. Finally I recommended that my associate verify his web host’s scanning techniques, or scan his web files himself. I insisted that the host (or he) should be checking for web shells of this nature. This can be done by scanning files for particular lines of code, or by simply scanning them for the names they often go by whihc can be found within the first few lines of code.

Here’s a link to some more information about one of these types of RATs, the C99 Shell:

http://www.securelist.com/en/descriptions/240456/Backdoor.PHP.C99Shell

This type of shell is usually written in PHP. Here’s a link to an example of the code from a similar version called the Web Shell by Orb:

https://gist.github.com/378433

Your success in the IT field depends on several factors including: your technical ability, your character, your people skills, your good health, and your ambition level. I break success down [...]]]> This article assumes that you have already obtained a position in the IT field. Click here for some suggestions on how to find IT jobs.

Your success in the IT field depends on several factors including: your technical ability, your character, your people skills, your good health, and your ambition level. I break success down into these five categories because it’s an easy way for me to evaluate others and re-evaluate myself periodically. Of course, success is a huge topic, but for now let’s talk about each of these five categories in a little more depth.

Technical ability

Your technical prowess is an integral part of your success. It’s extremely important to look at any situation from a logical standpoint. Your implementation and troubleshooting methodologies should be well honed, and reflect the organization that you work for. Of course it’s also important to keep your skill set up-to-date. Daily reading and occasional training are of utmost importance so that you can keep your skills sharp. Specializing in a specific part of the IT field can also be very beneficial. I have an article about specialization that you can access here. Be constantly enhancing your technical powers on all fronts; this creates job security for you, and ensures long-term IT success. Don’t be too eager to show off your skills though, over time you might find yourself being taking advantage of. But of course, don’t be selfish with your technical ability; help others in need if they ask it of you.

Character

I’ll be honest with you; people with good character and people with bad character can both succeed in the IT field. It all depends on the type of success you are looking for, and the length of that success. People with good character are people that are in it for the long run. They are team players who understand the goals of the company or organization, and put their best foot forward to accomplish those goals. They understand that there must be a purpose to their work. They treat others courteously and do their best to get tasks completed in a timely manner. They believe in teamwork. They go above and beyond the call of duty; helping others, staying late and showing up early, and sharing what they have learned with other employees. This long-term plan of good ethics allows for job security and job growth.

People with bad character on the other hand (you know who they are) will usually not stay at one job for very long. They may be able to pull the wool over people’s eyes for a short time, but most management persons will catch on to their antics sooner or later, and the person with bad character will be looking for employment elsewhere. People that use others for their own advancement, that set others up for the fall, that are clever and use subterfuge, are people of bad character. The problem is that they are also illogical. What I mean by this is that their methods waste time in the long run, and are therefore unproductive. Plus, people that use subterfuge are fearful, and fear is the mind killer, decreasing intelligent thought and logic. Unfortunately, these types of people are not uncommon in the IT field and you will run into them at some point in your career, most likely more than once. Let me give you a few tips on how to deal with these people.

If you are wronged by one of these people, I always recommend to let it go for the first occurrence, but make a note of it. If it happens again, then it’s time to start a personal log about the issues. Keep this in your own written journal or on your own personal smart phone, etc., but make sure it’s something that you own and not the company. Make a detailed account of the actions that were taken against you, timestamps of e-mails that were sent or received, time and date of conversations that were had, and what actions you took to fix the problem. Don’t get mad at the person causing the problem; if you fly off the handle, you’ll look like the bad person. You know the old saying, two wrongs don’t make a right. Keep things compartmentalized. You work in a specific department and report to a specific person. That should be the only person giving you tasks to accomplish. No other managers or supervisors should be authorized to assign jobs to you. (BTW, companies that allow this type of behavior can be very troublesome and chaotic.) Stay within your “box” so to speak, this will limit the amount of unnecessary interactivity with other departments. Finally, notify your immediate supervisor or manager of any issue in writing. On a sidenote, sometimes you need to simply laugh about these situations; laugh at the absurdity; laugh at the nonsense, it will usually make you feel better.

Anyways, by employing good character, over time it will be understood what your value is to the company. Bad character is a shortcut, a lazy means toward promotion. Good character, from what I have seen, is rewarded more greatly over the long term.

People skills

Success in the IT workplace is also heavily dependent on how you treat people. It starts with the initial interview and continues on all the way through to the last day that you work for a company and beyond.

It’s a good idea to be as courteous as possible during the interview process. If hired to an organization it’s also important to be respectful of other employees. Your boss (immediate supervisor or manager) is the person most likely to be involved in your reviews, raises, and possible promotions. Treat this person accordingly. Carry out whatever tasks they ask of you without any complaints. If the task appears to be too complicated, or if it appears to require more manpower, ask your boss for help. Your boss is also the person most likely to give you a reference when interviewing with other companies or when interviewing for a promotion. Keep all this in mind on a day-to-day basis when dealing with your department and with your boss.

Be sure not to burn any bridges, it’s important to keep as many good contacts, and references as possible. This helps to build your reputation and increases job security over the long term.

Good health

The IT field can be frustrating at times. But bad health can make it seem more frustrating than it really is. Mental, physical, and emotional health is vital when it comes to giving a solid performance day in and day out.

There are so many simple ways to increase your health, and make yourself feel stronger over the course of the day. 20 minutes (or more) of exercise, a decent meal, good sleep, meditation, yoga, and so on. Whatever makes you feel best, there are hundreds of options.
One interesting thing I have noticed is that many IT techs are moving away from caffeine and energy drinks. While caffeine might stimulate your thinking for a short time, it doesn’t promote mental growth, and it has a physical cost as well, if taken in large quantities.

Ambition level

Ambition is a key element to success. I’m talking about long-term career goals: where you see yourself in a year or two or even five; what kind of job you want to aim for; and so on.

Good ambition includes the desire to help your organization toward its goals as well as your own; ambition is purpose and determination in that respect. You also need to have the drive to do a good job every day. Your motivating factors should include job security, growth (for yourself and your organization), and of course monetary gain, but notice I put that last on the list.

The day-to-day grind deals with short-term objectives. Sometimes, these are the hardest to aim for as they can become mundane. In these times I like to think of longer-term aspirations and dreams and incorporate those into the mundane, making the day more interesting. It’s vital to watch out for apathy; the lack of ambition can cause huge losses of productivity for you and your co-workers.

Keep in mind that this is in no way the be-all end-all on how to succeed. These are just several of the things that have helped me over the course of my career so far.