Who is Sourcefire?
Sourcefire is the world leader in real-time network defense solutions,
transforming the way organizations manage and minimize network
security risks. Sourcefire’s products allow security practitioners
and managers to better leverage essential security data, while
reducing security costs and increasing effectiveness. Sourcefire
was founded in 2001 by the creator of SNORT® open source Intrusion
Detection technology, Martin Roesch.
|
 |
What is SNORT®?
Snort is an open source intrusion prevention and detection technology. Today,
with more than 3 million downloads, Snort is
the single most widely deployed prevention and detection technology in the world. The wide availability of open source brings
many advantages. Since the code is open and non-proprietary, open
source development occurs at a markedly accelerated pace compared
to proprietary models, thanks to a vast community of security experts
continually analyzing and improving code. Simply, users in the
open source security community worldwide can detect and respond
to bugs and other security threats faster and more efficiently
than in a “closed” environment. |
|
What are the benefits of certification?
Certification provides employers and employees a means by which
to measure an individual’s competencies in the industry-leading
intrusion prevention and detection technologies offered by Sourcefire
and Snort technology.
|
|
Is it a requirement to take a class prior to taking the
certification exam?
No. Participating in Sourcefire's classroom or e-learning training is not a requirement. Candidates that feel prepared to take the exams may do so at any time. However, Sourcefire recommends the 4-day instructor-led training which covers all material on the exam and provides a reference manual for study and later use.
|
|
What are the guidelines for taking the certification exam?
This exam consists of 200 random questions and a time limit of 4 hours. After successful completion of the exam, certificates and scores are available within 24 hours. To print the certification certificate, go to 'My Courses' and click the 'certificate' link below the course title. All candidates receive a 60-day subscription and have two attempts to pass the examination within that 60-day period.
|
|
What certifications are available?
Sourcefire has the following certifications:
- Sourcefire Certified Professional(SFCP)– Candidates
successfully achieving this level of certification will have
demonstrated a deep understanding of the underlying technology
and operation of the Sourcefire 3D System.
- Snort® Certified Professional (SnortCP) – Candidates
that achieve this certification option will have demonstrated
a thorough knowledge of Snort® and the Snort®rules
language.
- Sourcefire Certified Expert (SFCE) – Candidates
for the Expert level certification will have demonstrated a thorough
knowledge of both Sourcefire products and open source Snort technology.
|
|
What are the prerequisites for each Sourcefire certification?
There are no formal prerequisites for the SFCP and SnortCP levels of certification; however, it is strongly recommended that prospective candidates have a substantial background in networking technologies, general security and operating systems for successful completion of these certification programs. Candidates that are interested in both SFCP and SnortCP only need to pass the SFCE to become an expert in both technologies
|
|
How long is the certification valid?
Sourcefire certifications are linked to the release of the product available at the time the certification was earned. Certification will be considered current for one year or until one major release of Sourcefire or Snort product. Major releases vary based on technology changes and will be communicated to the industry as required. The SFCE certification is tied to both Sourcefire and Snort product releases and is considered current until after one major release of both products.
|
|
What training delivery methods are available?
Sourcefire offers instructor-led training in public classrooms all over the world or in private onsite settings at the customer's premises. Instructor-led courses are delivered in professional classrooms with fully equipped desktops for each student. For more information regarding onsite training, contact Sourcefire Training at (training@sourcefire.com). You can reference the Sourcefire site for specific information regarding course availability, class descriptions, and registration information. |
|
Are classes available globally?
Yes, classes are available on a worldwide basis. To choose a current location or a time that works for you view the Sourcefire training schedule. If your location is not listed on our website, email training@sourcefire.com to let us know. |
|
If I don’t pass the exam, when can I retake it?
Each candidate receives two attempts within their 60-day subscription period to pass the exam. If the candidate does not pass the exam on their first attempt, a second attempt is provided within the 60-day subscription window. |
|
If I have further questions regarding the program or pricing,
who may I contact?
Sourcefire Training or call us at 866.505.9113, or 734.743.6550. |
|
