{"id":37831,"date":"2019-10-31T22:20:00","date_gmt":"2019-10-31T19:20:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kak-kazaki-gicsp-sertifikat-poluchali\/"},"modified":"2019-10-31T22:20:00","modified_gmt":"2019-10-31T19:20:00","slug":"kak-kazaki-gicsp-sertifikat-poluchali","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/kak-kazaki-gicsp-sertifikat-poluchali","title":{"rendered":"Si e mor\u00ebn kazak\u00ebt certifikat\u00ebn GICSP","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

P\u00ebrsh\u00ebndetje t\u00eb gjith\u00ebve! N\u00eb portalin ton\u00eb t\u00eb preferuar jan\u00eb publikuar shum\u00eb artikuj t\u00eb ndrysh\u00ebm rreth certifikimit n\u00eb fush\u00ebn e siguris\u00eb s\u00eb informacionit, prandaj nuk pretendoj p\u00ebr origjinalitetin dhe unikitetin e p\u00ebrmbajtjes, por d\u00ebshiroj t'i ndaj p\u00ebrvojat e mia n\u00eb marrjen e certifikat\u00ebs GIAC (Global Information Assurance Company) n\u00eb fush\u00ebn e siguris\u00eb kibernetike industriale. Q\u00eb nga koha kur filluan t\u00eb shfaqen k\u00ebto fjal\u00eb t\u00eb frikshme si Stuxnet<\/a><\/noindex>, Duqu<\/a><\/noindex>, Shamoon, Triton, gradualisht filloi t\u00eb formohej nj\u00eb treg p\u00ebr ofrimin e sh\u00ebrbimeve nga specialist\u00eb q\u00eb duket se jan\u00eb IT, por q\u00eb gjithashtu mund t\u00eb rregullojn\u00eb PLC duke e riparuar konfigurimin n\u00eb ladders dhe duke mos e ndaluar fabrik\u00ebn. <\/p>\n

<\/a><\/noindex><\/p>\n

K\u00ebshtu, n\u00eb bot\u00eb erdhi nocioni IT&OT (Teknologjia e Informacionit & Teknologjia e Operacioneve). <\/p>\n

<\/p>\n

Menj\u00ebher\u00eb pas k\u00ebsaj, (natyrisht, nuk mund t\u00eb lejohet q\u00eb t\u00eb punojn\u00eb kuadro t\u00eb pa krijuara) erdhi nevoja p\u00ebr t\u00eb certificuar specialist\u00ebt n\u00eb fush\u00ebn e siguris\u00eb s\u00eb ASUTP, sistemeve industriale \u2013 t\u00eb cilat, duket se jan\u00eb shum\u00eb t\u00eb pranishme n\u00eb jet\u00ebn ton\u00eb nga valvula automatike e furnizimit me uj\u00eb n\u00eb apartament deri te sistemi i menaxhimit t\u00eb avion\u00ebve (ngjarje q\u00eb p\u00ebrkujtojm\u00eb n\u00eb artikullin e shk\u00eblqyer p\u00ebr hetimin e problemeve Boeing<\/a><\/noindex>). Madje, si\u00e7 ndodhi papritur \u2014 dhe t\u00eb pajisjeve mjek\u00ebsore t\u00eb komplikuara. <\/p>\n

<\/p>\n

Nj\u00eb paksa lirike se si arrita n\u00eb nevoj\u00ebn p\u00ebr t\u00eb marr\u00eb certifikat\u00eb (mund t\u00eb kaloni): Pas p\u00ebrfundimit t\u00eb studimeve n\u00eb fund t\u00eb viteve 2000 n\u00eb fakultetin e mbrojtjes s\u00eb informacionit, hidhja me kok\u00ebn lart n\u00eb radh\u00ebt e specialist\u00ebve t\u00eb automatizimit, duke punuar si mekanik n\u00eb sistemet e ul\u00ebta t\u00eb siguris\u00eb. Disa thoshin se isha n\u00eb sigurimin e informacionit n\u00eb at\u00eb koh\u00eb :) K\u00ebshtu filloi karriera ime si ASU-tp me diplom\u00ebn e bachelorit n\u00eb sigurimin e informacionit. Pas gjasht\u00eb vjet\u00ebve, pasardh\u00ebs n\u00eb pozitat e drejtorit t\u00eb sistemit SCADA, shkova t\u00eb punoj si konsultant p\u00ebr sigurin\u00eb e sistemeve industriale n\u00eb nj\u00eb kompani t\u00eb huaj q\u00eb ofron softuer dhe pajisje. k\u00ebtu erdhi nevoja p\u00ebr t'u certifikuar si specialist i sigurimit t\u00eb informacionit. <\/p>\n

<\/p>\n

GIAC<\/a><\/noindex> \u00ebsht\u00eb zhvillim i SANS<\/a><\/noindex> Organizatat q\u00eb merret me zhvillimin e trajnimeve dhe certifikimin e specialist\u00ebve n\u00eb sigurin\u00eb e informacionit. Reputata e certifikat\u00ebs nga GIAC \u00ebsht\u00eb shum\u00eb e lart\u00eb n\u00eb mesin e specialist\u00ebve dhe klient\u00ebve n\u00eb tregjet EMEA, SHBA, Azi-Paq\u00ebsor. Tek ne, n\u00eb hap\u00ebsir\u00ebn post-sovjetike dhe n\u00eb vendet e CIS, nj\u00eb certifikat\u00eb e till\u00eb mund t\u00eb k\u00ebrkohet vet\u00ebm nga kompani t\u00eb huaja q\u00eb kan\u00eb biznes n\u00eb vendet tona, agjenci nd\u00ebrkomb\u00ebtare dhe k\u00ebshillimi. Personaliz\u00ebm, kurr\u00eb nuk kam hasur n\u00eb nj\u00eb k\u00ebrkes\u00eb p\u00ebr ekzistenc\u00ebn e nj\u00eb certifikate t\u00eb till\u00eb nga kompanit\u00eb vendase. T\u00eb gjitha kryesisht k\u00ebrkojn\u00eb CISSP. Kjo \u00ebsht\u00eb mendimi im subjektiv dhe n\u00ebse dikush do t\u00eb ndante p\u00ebrvoj\u00ebn e tij n\u00eb komente \u2013 do t\u00eb ishte interesante t\u00eb di.<\/p>\n

<\/p>\n

N\u00eb SANS ka mjaft drejtime t\u00eb ndryshme (sipas mendimit tim, s\u00eb fundmi, djemt\u00eb e kan\u00eb zgjeruar shum\u00eb numrin e tyre), por ka dhe kurse praktike shum\u00eb interesante. M\u00eb p\u00eblqeu ve\u00e7an\u00ebrisht NetWars<\/a><\/noindex>. Por tregimi do t\u00eb flas\u00eb p\u00ebr kursin ICS410: ICS\/SCADA Security Essentials <\/a><\/noindex> dhe certifikat\u00ebn me emrin: Global Industrial Cyber Security Professional (GICSP)<\/a><\/noindex>.<\/p>\n

<\/p>\n

Nga t\u00eb gjitha llojet e certifikimeve t\u00eb Siguris\u00eb Industriale t\u00eb Cyber nga SANS, kjo \u00ebsht\u00eb m\u00eb universale. Pasi q\u00eb e dyta i p\u00ebrket m\u00eb shum\u00eb sistemeve t\u00eb Power Grid, t\u00eb cilave n\u00eb Per\u00ebndim u kushtohet v\u00ebmendje t\u00eb ve\u00e7ant\u00eb dhe p\u00ebrfshihen n\u00eb nj\u00eb klas\u00eb t\u00eb ve\u00e7ant\u00eb sistemesh. Nd\u00ebrsa e treta (n\u00eb momentin e rrug\u00ebs sime p\u00ebr certifikim) i p\u00ebrkiste Reagimit ndaj Incident\u00ebve.
\nKursi nuk \u00ebsht\u00eb i lir\u00eb, por ofron njohuri t\u00eb mjaftueshme p\u00ebr IT&OT. Ve\u00e7an\u00ebrisht do t\u00eb jet\u00eb i dobish\u00ebm p\u00ebr ata shok\u00eb q\u00eb kan\u00eb vendosur t\u00eb ndryshojn\u00eb sektorin e tyre, p\u00ebr shembull nga siguria IT n\u00eb sektorin bankar n\u00eb Sigurin\u00eb Industriale t\u00eb Cyber. Duke pasur parasysh q\u00eb un\u00eb kisha nj\u00eb background n\u00eb ASUTP, KIP dhe Teknologjin\u00eb e Operacioneve, p\u00ebr mua nuk kishte asgj\u00eb radikalisht t\u00eb re ose jetike n\u00eb k\u00ebt\u00eb kurs.<\/p>\n

<\/p>\n

Kursi p\u00ebrb\u00ebhet nga 50% teori dhe 50% praktik\u00eb. Nga praktika, aktiviteti m\u00eb interesant ishte kontesti \u2013 NetWars. Gjat\u00eb dy dit\u00ebve, pas kursit fillestar, t\u00eb gjith\u00eb student\u00ebt e t\u00eb gjitha klasave u ndan\u00eb n\u00eb ekipe dhe p\u00ebrfunduan detyra p\u00ebr marrjen e t\u00eb drejtave t\u00eb aksesit, ekstraktimin e informacionit t\u00eb nevojsh\u00ebm, marrjen e aksesit n\u00eb rrjet, nj\u00eb s\u00ebr\u00eb detyrash rreth hakimit t\u00eb hash-eve, pun\u00eb me Wireshark dhe nj\u00eb s\u00ebr\u00eb gj\u00ebrash t\u00eb tjera. <\/p>\n

<\/p>\n

Materiali i kursit ka nj\u00eb p\u00ebrmbledhje n\u00eb form\u00eb librash, t\u00eb cilat pastaj i merrni n\u00eb dispozitiven tuaj pa afat. Sidoqoft\u00eb, ato gjithashtu mund t\u00eb p\u00ebrdoren n\u00eb provim, pasi formati \u00ebsht\u00eb Open Book, por ato do t'ju ndihmojn\u00eb pak, sepse provimi ka 3 or\u00eb, 115 pyetje, dhe gjuha e provimit \u00ebsht\u00eb anglisht. N\u00eb 3 or\u00ebt e plota mund t\u00eb merrni nj\u00eb pauz\u00eb prej 15 minutash. Por mbani parasysh se n\u00ebse merrni nj\u00eb pauz\u00eb prej 15 minutash dhe riktheheni te testet pas 5 minutash, thjesht do t'i humbni 10 minutat e mbetura, pasi nuk do t\u00eb keni m\u00eb mund\u00ebsi t\u00eb pezullojm\u00eb koh\u00ebn n\u00eb programin e testimit. Mund t\u00eb humbni deri n\u00eb 15 pyetje, t\u00eb cilat pastaj do t\u00eb shfaqen n\u00eb fund t\u00eb testit. <\/p>\n

<\/p>\n

Personalmente, nuk e rekomandoj t\u00eb lini shum\u00eb pyetje p\u00ebr m\u00eb von\u00eb, sepse koha prej 3 or\u00ebsh \u00ebsht\u00eb v\u00ebrtet e pak\u00ebt, dhe kur n\u00eb fund shfaqen pyetje q\u00eb ende nuk i keni zgjidhur, ka nj\u00eb probabilitet t\u00eb madh q\u00eb t\u00eb mos arrini t\u00eb p\u00ebrfundoni. Un\u00eb kam l\u00ebn\u00eb 'p\u00ebr m\u00eb von\u00eb' vet\u00ebm tre pyetje, t\u00eb cilat ishin v\u00ebrtet t\u00eb v\u00ebshtira p\u00ebr mua, pasi lidhen me njohjen e standardeve NIST 800.82 dhe NERC. Psikologjikisht, pyetje t\u00eb tilla 'p\u00ebr m\u00eb von\u00eb' godasin nervat n\u00eb fund \u2014 kur truri juaj \u00ebsht\u00eb i lodhur, ju d\u00ebshironi t\u00eb shkoni n\u00eb tualet, dhe timeri n\u00eb ekran duket se zgjerohet n\u00eb progresion gjeometrik. <\/p>\n

<\/p>\n

N\u00eb p\u00ebrgjith\u00ebsi, p\u00ebr t\u00eb kaluar testimin duhet t\u00eb arrini 71% p\u00ebrgjigje t\u00eb sakta. Para se t\u00eb b\u00ebni provimin, do t\u00eb keni mund\u00ebsin\u00eb t\u00eb praktikoni n\u00eb teste reale \u2014 pasi n\u00eb \u00e7mimin p\u00ebrfshihen 2 teste praktike me 115 pyetje dhe kushte q\u00eb jan\u00eb t\u00eb ngjashme me ato t\u00eb provimit t\u00eb v\u00ebrtet\u00eb.<\/p>\n

<\/p>\n

Rekomandoj t\u00eb b\u00ebni provimin nj\u00eb muaj pas p\u00ebrfundimit t\u00eb trajnimit, duke e shpenzuar k\u00ebt\u00eb muaj p\u00ebr nj\u00eb studim t\u00eb sistematizuar n\u00eb pyetjet n\u00eb t\u00eb cilat ndiheni t\u00eb pasigurt. Do t\u00eb ishte mir\u00eb, n\u00ebse merrni materialet e printuara nga kursi, t\u00eb cilat duken si p\u00ebrmbledhje t\u00eb shkurt\u00ebr p\u00ebr \u00e7do tem\u00eb \u2014 dhe do t\u00eb k\u00ebrkoni informacion t\u00eb sakt\u00eb p\u00ebr temat q\u00eb p\u00ebrfshihen n\u00eb k\u00ebto libra. Pjes\u00ebzoni muajin n\u00eb dy pjes\u00eb, duke b\u00ebr\u00eb teste praktike dhe duke marr\u00eb nj\u00eb pasqyr\u00eb t\u00eb p\u00ebraf\u00ebrt se n\u00eb cilat pyetje jeni t\u00eb fort\u00eb dhe ku duhet t\u00eb p\u00ebrmir\u00ebsoheni. <\/p>\n

<\/p>\n

D\u00ebshiroj t\u00eb theksoj drejtimet kryesore nga t\u00eb cilat p\u00ebrb\u00ebhet vet\u00eb provimi (jo kursi m\u00ebsimor, pasi ai p\u00ebrfshin tema shum\u00eb m\u00eb t\u00eb gjera):<\/p>\n

<\/p>\n

    \n
  1. Siguria fizike: ashtu si n\u00eb provime t\u00eb tjera certifikimi, ky \u00e7\u00ebshtje merr mjaft v\u00ebmendje n\u00eb GICSP. Jan\u00eb pyetje mbi llojet e \u00e7el\u00ebsave fizik\u00eb p\u00ebr dyer, situata t\u00eb falsifikimit t\u00eb kartave elektronike, ku duhet t\u00eb jepet nj\u00eb p\u00ebrgjigje mbi identifikimin e qart\u00eb t\u00eb problemit. Shfaqen pyetje q\u00eb lidhen direkt me sigurin\u00eb e teknologjis\u00eb (procesit) n\u00eb var\u00ebsi t\u00eb fush\u00ebs s\u00eb subjektit \u2013 proceset e naft\u00ebs dhe gazit, centralet atomike ose rrjetet elektrike. P\u00ebr shembull, mund t\u00eb ket\u00eb nj\u00eb pyetje si: Cili \u00ebsht\u00eb lloji i kontrollit t\u00eb siguris\u00eb fizike n\u00eb situat\u00ebn kur merrni nj\u00eb alarm nga sensori i temperatur\u00ebs s\u00eb avullit n\u00eb HMI? Ose pyetje si: Cila situat\u00eb (ngjarje) do t\u00eb jet\u00eb shkaku p\u00ebr t\u00eb kryer nj\u00eb analiz\u00eb t\u00eb regjistrimeve video nga kamerat e sistemit t\u00eb siguris\u00eb perimetrale t\u00eb objektit?\n

    N\u00eb marr\u00ebdh\u00ebnie me p\u00ebrqindjet, do t\u00eb theksoja se numri i pyetjeve n\u00eb k\u00ebt\u00eb seksion n\u00eb provimin tim dhe n\u00eb provime t\u00eb prov\u00ebs nuk kaloi 5%.<\/li>\n

  2. Nj\u00eb tjet\u00ebr kategori pyetjesh, dhe nj\u00eb nga m\u00eb t\u00eb zakonshmet, jan\u00eb ato n\u00eb lidhje me ASUTP, PLC, SCADA: k\u00ebtu do t\u00eb jet\u00eb e nevojshme t\u00eb qasemi n\u00eb m\u00ebnyr\u00eb t\u00eb sistematizuar n\u00eb studimin e materialeve mbi se si jan\u00eb t\u00eb organizuara sistemet e menaxhimit t\u00eb proceseve teknologjike duke filluar nga sensor\u00ebt dhe duke p\u00ebrfunduar me serverat ku funksionon vet\u00eb software-i aplikativ. Nj\u00eb num\u00ebr i mjaftuesh\u00ebm pyetesh do t\u00eb hasen mbi llojet e protokolleve industriale p\u00ebr transmetimin e t\u00eb dh\u00ebnave (ModBus, RTU, Profibus, HART etj.). Do t\u00eb ket\u00eb pyetje p\u00ebr dallimin midis RTU dhe PLC, si t\u00eb mbrohen t\u00eb dh\u00ebnat n\u00eb PLC nga modifikimi i t\u00eb keqtrajtuarve, n\u00eb cilat pjes\u00eb t\u00eb memories PLC ruan t\u00eb dh\u00ebna dhe ku ruhet logjika e vet\u00eb (programi i shkruar nga programuesi i ASUTP). P\u00ebr shembull, mund t\u00eb ket\u00eb nj\u00eb pyetje t\u00eb till\u00eb: Jepen p\u00ebrgjigje se si mund t\u00eb zbulohet nj\u00eb sulm midis PLC dhe HMI q\u00eb funksionojn\u00eb sipas protokollit ModBus?\n

    Do t\u00eb hasen pyetje mbi dallimet midis sistemeve SCADA dhe DCS. Nj\u00eb num\u00ebr i madh pyetjesh do t\u00eb jen\u00eb mbi rregullat e ndarjes s\u00eb rrjeteve ASUTP n\u00eb nivelin L1, L2 nga niveli L3 (do t\u00eb p\u00ebrshkruaj m\u00eb n\u00eb detaje n\u00eb seksionin me pyetje mbi rrjetin). Pyetjet situative mbi k\u00ebt\u00eb tem\u00eb gjithashtu do t\u00eb jen\u00eb t\u00eb shum\u00ebllojshme - p\u00ebrshkruajn\u00eb nj\u00eb situat\u00eb n\u00eb qendr\u00ebn e kontrollit dhe duhet t\u00eb zgjidhen veprimet q\u00eb duhet t\u00eb kryej\u00eb operatori i procesit ose dispatcher.<\/p>\n

    N\u00eb p\u00ebrgjith\u00ebsi, ky seksion \u00ebsht\u00eb m\u00eb specifik dhe me profil t\u00eb ngusht\u00eb. Do t'ju k\u00ebrkoj\u00eb njohuri t\u00eb mira:
    \n \u2014 ASUP, pjesa fushore (senzor\u00ebt, llojet e lidhjeve t\u00eb pajisjeve, karakteristikat fizike t\u00eb sensor\u00ebve, PLC, RTU);
    \n \u2014 sistemet e mbrojtjes kund\u00ebr emergjencave (ESD \u2013 sistemi i nd\u00ebrprerjes emergjente) t\u00eb proceseve dhe objekteve (p\u00ebrve\u00e7 k\u00ebsaj, n\u00eb Habr\u00eb ka nj\u00eb cik\u00ebl t\u00eb shk\u00eblqyer artikujsh n\u00eb k\u00ebt\u00eb tem\u00eb nga     Vladimir_Sklyar<\/a><\/noindex>)
    \n \u2014 nj\u00eb kuptim baz\u00eb t\u00eb proceseve fizike q\u00eb ndodhin, p\u00ebr shembull, n\u00eb rafinimin e naft\u00ebs, prodhimin e energjis\u00eb elektrike, tubacione etj.;
    \n \u2014 kuptimi i arkitekturave t\u00eb sistemeve DCS dhe SCADA;
    \nDua t\u00eb theksoj se pyetje t\u00eb k\u00ebtij tipi mund t\u00eb p\u00ebrb\u00ebjn\u00eb deri n\u00eb 25% t\u00eb t\u00eb gjitha 115 pyetjeve t\u00eb provimit. <\/li>\n

  3. Teknologjit\u00eb rrjet dhe siguria rrjet: Mendoj se numri i pyetjeve n\u00eb k\u00ebt\u00eb tem\u00eb \u00ebsht\u00eb n\u00eb vendin e par\u00eb n\u00eb provim. Do t\u00eb ket\u00eb ndoshta gjith\u00e7ka \u2013 modeli OSI, n\u00eb cilat nivele funksionon nj\u00eb protokoll i caktuar, shum\u00eb pyetje mbi ndarjen e rrjetit, pyetje situatash mbi sulmet n\u00eb rrjet, shembuj t\u00eb protokolleve t\u00eb lidhjes me propozimin p\u00ebr t\u00eb p\u00ebrcaktuar llojin e sulmit, shembuj t\u00eb konfigurimeve t\u00eb nd\u00ebrlidh\u00ebsit me propozimin p\u00ebr t\u00eb p\u00ebrcaktuar konfigurimin e ndjesh\u00ebm, pyetje mbi dob\u00ebsit\u00eb e protokolleve rrjet, pyetje mbi specifikat e lidhjeve t\u00eb protokolleve industriale. Pjesa m\u00eb e madhe e pyetjeve b\u00ebhet p\u00ebr ModBus. Struktura e paketave rrjetore t\u00eb ModBus, n\u00eb var\u00ebsi t\u00eb llojit t\u00eb tij dhe versioneve t\u00eb pajisjeve t\u00eb mb\u00ebshtetura. V\u00ebmendje e madhe i kushtohet sulmeve n\u00eb rrjetet pa tel \u2013 ZigBee, Wireless HART, thjesht pyetje mbi sigurin\u00eb rrjetore t\u00eb gjith\u00eb familjes 802.1x. Do t\u00eb ket\u00eb pyetje mbi rregullat e vendosjes s\u00eb server\u00ebve t\u00eb caktuar n\u00eb rrjetin ASUTP (k\u00ebtu duhet t\u00eb lexoni standardin IEC-62443 dhe t\u00eb kuptoni parimet e modeleve standarde t\u00eb rrjeteve ASUTP). Do t\u00eb hasni pyetje mbi modelin Purdue.<\/li>\n
  4. Kategoria e pyetjeve q\u00eb i p\u00ebrket ekskluzivisht karakteristikave funksionale t\u00eb pun\u00ebs s\u00eb sistemeve t\u00eb transmetimit t\u00eb energjis\u00eb elektrike dhe sistemeve t\u00eb siguris\u00eb informative p\u00ebr to. N\u00eb SHBA, kjo kategori sistemesh t\u00eb ASUTP quhet Power Grid dhe i jepet nj\u00eb rol i ve\u00e7ant\u00eb. P\u00ebr k\u00ebt\u00eb, dalin standarde t\u00eb ve\u00e7anta (NIST 800.82) q\u00eb rregullojn\u00eb qasjen n\u00eb krijimin e sistemeve t\u00eb siguris\u00eb informative p\u00ebr k\u00ebt\u00eb sektor. N\u00eb vendet tona, n\u00eb shumic\u00ebn e rasteve, ky sektor kufizohet n\u00eb sistemet ASKUE (ndreqoni n\u00ebse dikush ka hasur n\u00eb nj\u00eb qasje m\u00eb serioze mbi kontrollin e sistemeve t\u00eb shp\u00ebrndarjes dhe d\u00ebrges\u00ebs s\u00eb energjis\u00eb elektrike). Pra, n\u00eb provim do t\u00eb hasni pyetje mjaft specifike q\u00eb i p\u00ebrkasin Power Grid. Kryesisht, k\u00ebto ishin raste p\u00ebrdorimi p\u00ebr nj\u00eb situat\u00eb t\u00eb caktuar n\u00eb nj\u00eb Power Plant, por gjithashtu mund t\u00eb ket\u00eb pyetje p\u00ebr pajisjet q\u00eb p\u00ebrdoren pik\u00ebrisht n\u00eb Power Grid. Do t\u00eb ket\u00eb pyetje q\u00eb adresohen n\u00eb njohurit\u00eb mbi seksionet e NIST p\u00ebr k\u00ebt\u00eb kategori sistemesh.<\/li>\n
  5. Pyetje q\u00eb lidhen me njohurit\u00eb e standardeve: NIST 800-82, NERC, IEC62443. Mendoj se k\u00ebtu nuk ka nevoj\u00eb p\u00ebr komente t\u00eb ve\u00e7anta \u2013 \u00ebsht\u00eb e nevojshme t\u00eb orientoheni n\u00eb seksionet e standardeve, \u00e7far\u00eb p\u00ebrgjigjet p\u00ebr \u00e7far\u00eb dhe cilat rekomandime p\u00ebrmban. Takohen pyetje konkrete, p\u00ebr shembull, q\u00eb k\u00ebrkojn\u00eb periodicitetin e kontrollit t\u00eb funksionalitetit t\u00eb sistemit, periodicitetin e p\u00ebrdit\u00ebsimit t\u00eb procedur\u00ebs etj. N\u00eb proporcione, k\u00ebto pyetje mund t\u00eb p\u00ebrb\u00ebjn\u00eb deri n\u00eb 15% t\u00eb numrit total t\u00eb pyetjeve. Por k\u00ebtu, si do t'ju shkoj\u00eb. P\u00ebr shembull, n\u00eb dy provime prove, takova vet\u00ebm disa pyetje t\u00eb tilla. Por n\u00eb provimin real, kishte me t\u00eb v\u00ebrtet\u00eb shum\u00eb.<\/li>\n
  6. Kategoria e fundit e pyetjeve \u00ebsht\u00eb \u00e7do lloj use-case dhe pyetje situative. <\/li>\n<\/ol>\n

    <\/p>\n

    N\u00eb p\u00ebrgjith\u00ebsi, trajnimi, p\u00ebrve\u00e7 ndoshta CTF NetWars, nuk ishte shum\u00eb informativ p\u00ebr mua n\u00eb planin e fitimit t\u00eb njohurive t\u00eb reja potenciale. M\u00eb shum\u00eb u fituan detaje m\u00eb t\u00eb thella mbi disa tema, ve\u00e7an\u00ebrisht n\u00eb fush\u00ebn e organizimit dhe mbrojtjes s\u00eb rrjeteve radio, q\u00eb p\u00ebrdoren p\u00ebr transferimin e informacionit teknologjik, si dhe materiale m\u00eb t\u00eb renditura mbi struktur\u00ebn e standardeve nd\u00ebrkomb\u00ebtare q\u00eb i kushtohen k\u00ebsaj teme. Prandaj, p\u00ebr inxhinier\u00ebt dhe specialist\u00ebt q\u00eb kan\u00eb njohuri dhe p\u00ebrvoj\u00eb t\u00eb mjaftueshme n\u00eb sistemet e automatizimit dhe kontrollit t\u00eb proceseve \/ rrjetet industriale \u2013 mund t\u00eb mendohet t\u00eb kursejn\u00eb n\u00eb trajnim (n\u00eb fakt ka kuptim t\u00eb kursejn\u00eb), t\u00eb p\u00ebrgatiten vet\u00eb dhe t\u00eb shkojn\u00eb menj\u00ebher\u00eb p\u00ebr t\u00eb dh\u00ebn\u00eb provimin e certifikimit, i cili, p\u00ebr t'u th\u00ebn\u00eb t\u00eb drejt\u00ebn, kushton 700USD. N\u00eb rast d\u00ebshtimi, do t'ju duhet t\u00eb paguani p\u00ebrs\u00ebri. Qendrat e certifikimit q\u00eb do t'ju pranojn\u00eb p\u00ebr provim ka boll, e r\u00ebnd\u00ebsishme \u00ebsht\u00eb t\u00eb dor\u00ebzoni aplikimin paraprakisht. N\u00eb p\u00ebrgjith\u00ebsi, rekomandoj t\u00eb vendosni menj\u00ebher\u00eb nj\u00eb dat\u00eb p\u00ebr provimin, sepse ndryshe do t\u00eb vazhdoni ta shtyni at\u00eb, duke e z\u00ebvend\u00ebsuar procesin e p\u00ebrgatitjes me gj\u00ebra t\u00eb tjera jet\u00ebsore dhe jo aq t\u00eb r\u00ebnd\u00ebsishme. Dhe duke patur nj\u00eb dat\u00eb t\u00eb caktuar si afat, do t\u00eb jeni t\u00eb motivuar vet\u00eb.<\/p>\n

    Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u041d\u0430 \u0432\u0441\u0435\u043c\u0438 \u043b\u044e\u0431\u0438\u043c\u043e\u043c \u043f\u043e\u0440\u0442\u0430\u043b\u0435 \u0431\u044b\u043b\u043e \u043c\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0442\u0430\u0442\u0435\u0439 \u043f\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0418\u0411, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043f\u0440\u0435\u0442\u0435\u043d\u0434\u043e\u0432\u0430\u0442\u044c \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0438 \u043d\u0435\u043f\u043e\u0432\u0442\u043e\u0440\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u043d\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u044e\u0441\u044c, \u043d\u043e \u0432\u0441\u0435 \u0436\u0435 \u043e\u0447\u0435\u043d\u044c \u0445\u043e\u0442\u0435\u043b \u0431\u044b \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u0441\u0432\u043e\u0438\u043c \u043e\u043f\u044b\u0442\u043e\u043c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f GIAC (Global Information Assurance Company) \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0421\u043e \u0432\u0440\u0435\u043c\u0435\u043d \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u0430\u043a\u0438\u0445 \u0441\u0442\u0440\u0430\u0448\u043d\u044b\u0445 \u0441\u043b\u043e\u0432 \u043a\u0430\u043a Stuxnet, Duqu, Shamoon, Triton, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-37831","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Si e mor\u00ebn kazak\u00ebt \u00e7ertifikimin GICSP | ProHoster","description":"P\u00ebrsh\u00ebndetje t\u00eb gjith\u00ebve!","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/kak-kazaki-gicsp-sertifikat-poluchali","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u043a\u0430\u0437\u0430\u043a\u0438 GICSP \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438 | ProHoster","og:description":"\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442!","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/kak-kazaki-gicsp-sertifikat-poluchali","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:20:00+00:00","article:modified_time":"2019-10-31T19:20:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37831","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 19:26:35","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:20:22","updated":"2026-01-23 19:26:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/37831","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=37831"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/37831\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=37831"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=37831"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=37831"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}