Certs: Security+ plus CCNA
Social posts and trainers continue to recommend Security+ as a practical baseline and pairing it with CCNA networking fundamentals to improve troubleshooting and segmentation skills important to defenders. Free AI‑focused security courses are also being flagged as high‑ROI upskilling that can complement traditional certs for hands‑on roles. (x.com) (x.com)
A lot of new cybersecurity learners keep hearing the same two names for a reason: CompTIA Security+ for the first map of the terrain, and Cisco Certified Network Associate for learning how the roads between systems actually work. CompTIA says Security+ is built to validate core security skills, while Cisco says its Cisco Certified Network Associate exam covers network fundamentals, access, Internet Protocol connectivity, services, security fundamentals, and automation. (comptia.org) (cisco.com) Security+ is the cert people point to when someone needs a baseline because it covers the daily defender jobs almost every team has. CompTIA’s current Security+ version, exam code SY0-701, puts 28% of the exam on security operations and 22% on threats, vulnerabilities, and mitigations, which is why it lines up with entry-level analyst work. (comptia.org 1) (comptia.org 2) That baseline helps, but defenders spend a huge part of the day chasing traffic through switches, routers, subnets, and access lists. Cisco’s official Cisco Certified Network Associate blueprint includes network access and Internet Protocol connectivity because you cannot isolate a bad system if you do not understand how packets move from one machine to another. (cisco.com 1) (cisco.com 2) Network segmentation sounds abstract until you picture an office building with fire doors between floors. Cisco Certified Network Associate teaches the switching, routing, and access-control basics behind those doors, and Security+ adds the security logic for deciding which doors should stay closed during an incident. (cisco.com) (comptia.org) That pairing also fixes a common beginner problem: knowing security vocabulary without being able to troubleshoot a real outage. Cisco’s exam still spends time on Internet Protocol services and automation, which means learners practice the plumbing that breaks when a virtual private network fails, a domain name lookup misroutes, or a firewall rule blocks the wrong segment. (cisco.com 1) (cisco.com 2) Security+ has also shifted toward newer environments instead of only old on-premises networks. CompTIA says the SY0-701 version emphasizes zero trust, cloud, operational technology, and hands-on problem solving, so the cert is less about memorizing terms and more about recognizing what a defender is supposed to do when alerts start firing. (comptia.org) (comptia.org) The newer twist is that people are not stopping at traditional certs. Microsoft now offers a free “Artificial Intelligence security fundamentals” learning path that explains basic artificial intelligence security concepts, control layers, and testing procedures, which gives working defenders a way to learn the new attack surface without paying for another exam first. (microsoft.com) (microsoft.com) Google is pushing the same direction from the cloud side. Google Cloud has published no-cost training and workshops around generative artificial intelligence and security operations, including a 2025 “Agentic Security Operations Center Workshop” for practitioners who want practical artificial intelligence skills instead of vendor slogans. (google.com) (google.com) So the advice showing up in trainer circles is not really “collect more badges.” It is closer to “learn defense in layers”: Security+ for the security playbook, Cisco Certified Network Associate for the network map, and free artificial intelligence security training for the new tools and new failure modes landing on security teams right now. (comptia.org) (cisco.com) (microsoft.com)
