Как бы я изучал кибербезопасность с нуля в 2025 году (дорожная карта для начинающих)

Beginner’s Path into Cybersecurity

The speaker focuses mainly on penetration testing. His core recommendation is to build practical knowledge through self-study, then use recognized certifications to validate it.

Suggested learning and career roadmap

1. Build a foundation through self-study

   • Use videos, forums, professional books, and hands-on practice to learn the field and its tools.
   • Avoid rushing into certifications before gaining a basic understanding.
   • Keep your knowledge current. Technical interviews may test whether you can use tools in practice, not just describe them.

2. Consider certifications

   • CompTIA PenTest+ is presented as a relatively accessible, theory-based exam. Its topics include penetration-testing tools, application and network vulnerabilities, and Windows and Linux systems, including Active Directory. Exam costs may change, so check the official site.
   • EC-Council CEH is described as a more expensive, largely theory-based certification. Its material covers penetration testing, vulnerability scanning, cryptography, and defenses against threats. The speaker suggests reviewing sample exam questions, even if you do not intend to take the exam.
   • OSCP is recommended as a way to demonstrate practical skills. The speaker describes it as challenging and expensive, but valuable for job prospects. Preparation involves studying a substantial manual, watching lectures, practicing in a virtual-machine lab, and producing a report—not simply answering multiple-choice questions.

3. Prepare for technical interviews

   • Interviews often begin with theoretical questions to establish a candidate’s knowledge and professional scope.
   • Practical stages may involve a lab or CTF-style task. Candidates need to adapt quickly and demonstrate competent use of tools.
   • Regular practice can help prevent gaps in tool knowledge or command syntax from becoming a problem.

The speaker also promotes his penetration-testing e-book series, covering Windows, Linux, and corporate networks, and says sample chapters are available.

Speakers and sources featured

• Speaker: Denis Kurets, who refers to himself as “Denchik.”
• Certifications and training resources: CompTIA PenTest+, EC-Council CEH, and OSCP. The OSCP preparation course is referred to in the subtitles as PWK/PEN-200.
• Practice resource: TryHackMe.
• General study resources: YouTube videos, forums, professional literature, and hands-on labs.
• Additional material: The speaker’s penetration-testing e-book series.