Re: Having to sign an NDA
These sorts of exam questions will be hard to come up with. So it would be a lot of work (and/or expensive) to generate new questions for every exam.
Nice to see CREST has opted for easy option of an NDA and to reuse the content as much as poss.
When we procure pen testing services normally CREST cert is an accepted qualification. I think I'm now seeing why we occasionally get guys who seem to know less than me. If CREST don't step up we'll likely remove CREST as an accepted qualificationa and we'll just need to pay up for CHECK testing.
Sucks for the good guys for CREST but what's a customer to do if we've lost faith in the qualification?