My name is Jonas, but many people know me as Kiyoo.

I’ve been thinking about how to draft this page for a while now.

“How should I present myself on my blog?”

“How much should I disclose?”

“How useful would knowing my background be to the person reading this blog”?

More importantly, how do I convey all this information effectively without sounding like I understand everything (which, frankly, I don’t)?

Ultimately, I decided that it makes sense to have this page in place, if nothing else, but to ensure I don’t need to insert or cite my experience (or lack thereof) on certain topics each time I post.

This post (and the blog, by extension) also serves as a living document of the skills I possess as well as the ones I am currently developing.

Let’s get started!

Why should I listen to you?

Honestly, I would prefer if you did your own research and used my posts and guidance as a supplement or source of inspiration, but here are a few things that I feel qualify me as a trusted source:

• I’ve been working with consumer electronics for over two decades (hands-on!). This involves disassembling them, rebuilding them, troubleshooting software and hardware, and providing user training and guidance.

• I’ve worked within three of the most consequential tech companies in the world and have become a subject matter expert within each of them.

• I’ve been certified by multiple reputable organizations, including CompTIA, ISC2, Intel, and AWS.

Even with all this, I’m only human, so I won’t always be correct. I encourage others to provide feedback whenever applicable, so I can learn and grow as a cybersecurity professional.

Why didn’t you study computer science?

I have always been fascinated by computers and how they’ve fundamentally changed how we live our lives and interact with others. Like most kids, my first computer-related obsession was video games. When my dad came home with an old AMD Athlon X2 II desktop computer pre-loaded with Call of Duty 2 and Halo: Combat Evolved, I remember spending hours a day watching tutorials on the then-new YouTube and watching others create montages of their gameplay.

It was around this time that I also got my first-ever Apple device: the coveted iPod Touch (4th generation). I remember using Cydia to jailbreak the iPod, mainly to download YouTube videos so I could learn more about building computers, install features not available on iOS, or simply test the limits of what that small but mighty Apple A4 chip could do.

Of course, this was before every kid would be expected to have a phone, since most of our parents would know where we were anyway. This was also before the days of social media running everything, even though we did have Facebook.

Looking back on the past, we took the Internet for granted during this time, trusting that our local ISP, school IT administrators, and home router knew exactly what they were doing. More importantly, we weren’t as concerned about our privacy since we only added people we knew and trusted.

This was also around the same time I discovered how to bypass the family security controls on my NETGEAR router, as my mom had inadvertently blocked Steam TCP/UDP ports, which I needed to play Counter-Strike: Global Offensive.

Parents, this is an important lesson about physical access to home networking equipment: never make it easy for your kids to reset the router and circumvent your Internet safety settings.

For everyone else, please change your default admin passwords.

In high school, I took a course on computer networking designed to prepare me for the Cisco Certified Network Associate (CCNA) exam. Back then, however, I didn’t take it seriously as the idea of being stuck in a server room as a career wasn’t exactly glamorous. I spent a lot more time focusing on video production, obsessed with the rise of gaming YouTubers and live streaming on Twitch.

Instead, I spent the remaining years in high school learning Adobe Premiere Pro, Open Broadcasting Software (OBS), and how to establish brand presence on the Internet. I also briefly dabbled in e-sports, gaining valuable experience in managing a team, coordinating events, and optimizing desktop computers for optimal gaming performance. I was also consulted and built several gaming computers for friends during this time.

I should mention here that I also wasn’t the best student due to several compounding factors: transferring into a highly competitive school district, undiagnosed ADHD, and ongoing issues at home with family.

…and I was really bad at post-algebraic math (namely, Calculus).

As a result, I took the networking knowledge with me and let IT sit on the back burner as I worked on my first college degree in film, which I completed in 2024. I went on to work for several companies in retail sales, including Apple, Verizon, and Tesla. I also had a brief stint as both a customer service rep and a cybersecurity coordinator at a logistics company, where I also assisted with IT projects, including network deployment, break-fix consulting, and user training.

What made you change your mind?

Several reasons:

1. COVID-19, the pandemic, changed many people’s perspectives on their careers, and mine was no exception. Without the ability to access film sets or equipment, there was little to do but return to studying and attending lectures over Zoom.

2. 2023 Writers Guild of America strike, showcased the disparity in pay and dignity between writers and producers. As my focus was on screenwriting, I didn’t like my odds pursuing this line of work and had already begun exploring other avenues. This is even before mentioning the role of AI being forcefully integrated into writers’ workflows, if not outright replacing them.

3. Working for Apple in 2021 was eye-opening; I realized that I was capable of conveying technical concepts to the average person. I was technically proficient enough to guide others and possessed the temperament to provide tech support regardless of the user’s experience level. It was also extremely satisfying to help others achieve their goals and realize their potential.

Okay… but why did you choose cybersecurity?

Being a 1999 baby, born at the turn of the millennium, I’ve been able to witness and participate in multiple major shifts in technology.

• The dawn of the smartphone and the proliferation of mobile computing devices

• The shift from on-premises infrastructure to a largely cloud-native environment

• The rapid onset of globalization via the Internet

• The transition of IT into a far more security-conscious career

• The advent of cyber warfare and its separation from strictly military targets

• The exponential rise of botnets, ransomware, and zero-click attacks

• The emergence of truly powerful artificial intelligence

Simply put: the more our technology advances, the higher the risk of abuse by malicious actors. The complexity enabling the positives also bolsters the threat posed by the negatives.

I’ve been able to enjoy and preach the fruits of the tech revolution without really thinking too much about the poison that can come from its misuse.

This really didn’t click for me until my family was affected by a data breach.

What happened?

In November 2024, the tax preparation firm my family used was involved in a “security incident involving a third-party software platform [they] use to help file tax returns”.

It was revealed that our “name, address, date of birth, SSN” and other tax related information was affected.

I received a letter confirming this on June 25, 2025, a full seven months after the threat actor had already tried to file a tax return in my name (along with my other family members), and after taking all necessary precautions, such as setting up fraud alerts, notifying the IRS and state tax board, I felt helpless but to wait and see what damage might be done.

What did you do?

The remediation was a nightmare; I had to maintain constant vigilance over credit reports and explain the severity of the situation to my family before we received official confirmation from the tax filing firm. I was the first to notice indicators of compromise, such as being unable to e-file my taxes due to a pre-existing fraudulent filing, and altered contact information on the fraudulent tax filings.

I had to submit proof of identity and a full statement of fact to my state’s tax board, and freeze my credit reports with every credit bureau to ensure no new lines of credit could be established in my name.

Until now, I have always viewed data breaches as an unavoidable consequence of a world driven by information, utilizing increasingly interconnected systems and highly complex code that will eventually be exploited. More importantly, in my ignorance, I always perceived it as a distant threat and a transient headline on the web.

At the time of writing, here are a few from just this past year alone:

“Allianz Life data breach affects majority of 1.4 million U.S. customers, insurance company says”

“DHS and HHS among federal agencies hacked in Microsoft SharePoint breach”

“Nissan data breach exposes Social Security numbers of nearly 53,000”

And while it could be true that data breaches will continue to be an ongoing risk and reality, it doesn’t mean inaction is better than the alternative. This was when I realized that information security might be the next step for me.

So what’s next?

I’m currently working on several projects, certifications, and skills to transform myself into a full-fledged security professional. With the help of friends in the industry and by attending as many conferences and summits as possible, I plan to become more capable as an analyst and prepare myself for a role in the SOC.

Here’s just a preview of my progress:

Labs

TryHackMe - SOC Level 1 (31% complete)

HackTheBox - SOC Analyst Path (12% complete)

Certs

HTB Certified Defensive Security Analyst - Studying / Dec 2025

AWS Security Specialty - Studying / Dec 2025

CompTIA Cybersecurity Analyst (CySA+) - Planned / 2026

Cisco Certified Network Associate (CCNA) - Planned / 2026

School

WGU Accelerated IT Bachelor’s and Master’s Degree (74% complete)

WGU Master’s in Cybersecurity and Information Assurance - Planned / 2027

One last note before we go…

If you managed to read this far, thank you for taking an interest in my passion and my life.

I hope that this blog continues to serve as a valuable resource for emerging cybersecurity professionals, as well as for the average person seeking a glimpse into this complex yet fascinating world we have created.

I will strive to keep this page up to date and provide relevant resources as they become available.

Stay vigilant and be safe.

With love,
Kiyoo

Who Am I?

Hi there, fellow IT journeymen!

My name is Jonas, or Kiyoo, and I’ve been working in the tech sector for the past three years, primarily in sales, at small companies such as Apple, Verizon, and Tesla. In my free time, I’m largely messing with my computer and homelabbing to practice Active Directory management and breaking virtual machines for the millionth time this week.

I earned my CompTIA trifecta from Nov 2024 - Feb 2025 in order to transition from tech sales to IT and cybersecurity, which was honestly a long time coming given my history with electronics and networking.

I’ve been tinkering with Windows PC’s, jailbreaking iPod touches, finding funny diagnostics menus on Androids, and messing with my Wi-Fi router’s settings for nearly as long as I can remember.

I am what most would consider to be the quintessential tech nerd:

• I’ve built most of my closest friends’ computers from scratch.

• I’m usually the first person in the family people go to for tech support.

• My YouTube feed looks like a curated hub for tech influencers such as MKBHD, LTT, Optimum, and Dave2D.

Now that you have a general idea of my background in tech, here’s how you can pass your CompTIA trifecta (A+ / Network+ /Security+) in a reasonable amount of time as well!

Note: We will be aiming for an average of one cert per month.

What you’ll need

A calendar/organizer of your choice.

• (Recommended) Microsoft OneNote

  • This will help you keep your certification study materials organized and monitor your progress towards covering all exam objectives.

    

• (Recommended) Google / Notion Calendar

  • This calendar should sync with your PC and mobile devices, ensuring you keep pace with study blocks, take your breaks, and get enough sleep between sessions.

    

    

    The screenshots attached are just examples, but you can and should customize your study sessions accordingly. Account for any breaks, events, and sleep to allow your mind to recuperate and process information.

A copy of the exam objectives

• CompTIA Exam Objectives

  • Select every exam you intend to take to avoid sharing your contact information more than once with CompTIA.

  • PRINT THEM OUT and use them as a checklist to highlight your strengths and weaknesses.
    

An exam voucher

• There are several ways to get a voucher (ordered by pricing/convenience):

  • (Recommended, if included) Training/College Courses

  • (Recommended, if offered) Employer Reimbursement

    Per CompTIA: If you're looking for ways to spice up your career, it doesn't hurt to ask your current employer if they offer employee benefits for tuition reimbursement or professional development options. Some employers will offer you a discount towards getting your next certification.

  • (Recommended, if eligible) Academic Store

    Per CompTIA: Actively registered students of four-year-degree institutions (and some two-year institutions) in the United States can get 40% off vouchers and 65% off learning products in the CompTIA Academic Store.

  • (Recommended, if not eligible for any of the above)

    Trusted third-party with discounted vouchers such as Professor Messer or Dion Training

  • Directly from the CompTIA store

An undying commitment to consistency, planning, and taking care of your overall health.

• No, seriously. Burnout is a very real thing when you’re crunching this much information into such a short amount of time. It is extremely difficult to remember what you studied if you can’t even remember what day of the week it is. Planning out your schedule ahead of time ensures you stay on track and can get back on track if anything happens or changes.

The Secret Sauce

Passing CompTIA certification exams is mostly about time management. You must be able to block off as much time studying as you are resting. The density of the content is such that if you try to absorb it all in one day, you will burn out quickly and lose information just as fast.

For the exam, skip the Performance Based Questions (PBQ’s) and go through all the multiple-choice questions first as quickly as you can. Flag anything you’re unsure about for review near the end. We will talk more about exam day below in Phase 4.

So, what’s the plan?

Phase 1: Preparation (Week 1)

Watch videos, make or read some study notes to follow along.

Let everything soak into your head.

You may choose to cover all domains at once (by video) if you have a good memory or focus on one domain at a time and repeat this phase.

FAQ: What is a “domain”?
Each CompTIA exam is separated into multiple domains. For example, the A+ Core 1 has five domains, each separated into subdomains or competencies.
(eg. Domain 1 - Mobile Devices, Subdomain 1.1 Install and configure laptop hardware.)

Note: some domains are weighed MORE heavily than others

Phase 2: Identification (Week 2)

Quiz yourself, attempt an initial first practice exam, make flashcards for terms (especially for Security+, they're heavy on abbreviations)

Pro Tip: Save yourself time (and money!) by jotting down difficult questions as you watch through videos in Phase 1. By the end of Phase 1, you should have enough questions to quiz yourself on each domain (at minimum) and possibly have enough for a full practice test.

As best practice, you should save definitions for flashcards, and concepts for quizzes. For example, “What is Wi-Fi?” should be a flashcard while “How is 2.4GHz Wi-Fi different from 5GHz?” should be a quiz question.

Phase 3: Recovery (Week 3)

Revisit your weakest topics based on your practice exams! If you don't get something, see if someone else explains it better, or maybe find a new way to learn the concept. Prefer visuals? Look at diagrams or animations for topics such as public-private key or certificate signing.

Pro Tip: This is a good time to reach out to your peers! Join a Discord or reputable online community and ask questions. This is the time to know what you don’t know and make mistakes. Find a study group, pick someone else’s brains, and get good.

Phase 4: Lessons Learned (Week 4)

Leading up to test day, you should have a hot sheet/cheat sheet with brief summaries of each domain. Take one last practice exam the day before to gauge if any new weaknesses are showing, and briefly review, but otherwise, you should be ready!

Pro Tip: Before test day, get a full night’s rest. Plan to wake up an hour earlier for a light meal and a quick review of your cheat sheet to beat mental fog.

If you are attending your exam in-person, try to visit the testing center ahead of time and know your route.

If you are using OnVue online proctored exam, ensure your test area is clear and perform a hardware test before the exam.

This will save you a lot of headaches and keep you focused on the exam rather than stressing over being late, technical problems, or other hinderances.

Great, what material should I use?

Disclaimer: I strongly recommend building your own study notes, quizzes, practice tests, and flashcards. Not only because it is a tremendous money saver, but also because it reinforces what you’ve already spent so much time learning.

If you’re in an extreme time crunch, I would also suggest using ChatGPT for free to generate short quizzes for you in lieu of paying for pre-made practice tests.

Summary of Fully Featured Courses

In my opinion, Professor Messer’s coverage of A+/Network+/Security+ remains the strongest foundation for most learners. The videos are short while retaining enough information to beat the exams but requires active listening skills (meaning you should be taking notes while watching) to make the most of the content.

Jason Dion’s training is better for individuals who want tangential and industry-relevant knowledge that can stand on its own without a CompTIA certification. His tendency to dive into out-of-scope details draws out the length of his courses, but you will be better off in the end if you are working already in IT and want more context with your studies. I personally used his videos on Udemy to flesh out some subjects that I felt Professor Messer may have left unanswered, and I felt his Security+ course was far more substantial in detail and practical examples.

Andrew Ramdayal’s courses I felt were best for individuals who prefer a more conversational teaching style. Expect less professional polish than Messer, less technical jargon than Dion, but this may be extremely beneficial for individuals who have no exposure to IT or technology besides their smartphones or work PC and need more relatable comparisons or alternative methods of explaining concepts that are harder to grasp or too abstract such as VLAN’s. In my opinion, he also has some of the best practical labs.

Pro Tip: I would recommend Udemy for the latter two instructors as the value proposition ($35/mo) cannot be beat for effectively unlimited access to both for three certifications.

Fully Featured Courses (Videos + Notes + Practice Exams)

• (Recommended, Free) Professor Messer - YouTube

  • A+ 220-1101 (Core 1) Course Playlist

  • A+ 220-1102 (Core 2) Course Playlist

  • Network + (N10-009) Course Playlist

  • Security+ (SY0-701) Course Playlist

    Note: While Professor Messer’s videos are free, his notes and practice exams are available standalone for purchase or as part of a whole package. I recommend choosing the package that best suits your needs.

• (Recommended, Paid)

  • Jason Dion / Udemy

  • Andrew Ramdayal / Udemy Page

Study Notes

• (Recommended, Paid) Professor Messer

  Even though Jason and Andrew’s courses on Udemy provide course notes as part of their courses, I found Messer’s notes to be ideal for exam day review and his diagrams were far more accessible and informative than the others.

Practice Exams

• (Recommended, Paid) Udemy (Dion)

  Out of the three, Dion Training’s exams provided the most detail and best immediate feedback with Study Mode and Practice Test proving the best benchmark of exam day performance across my three tests.

• (Good Value, Paid) Crucial Exams

  A relative newcomer to the test prep suite, Crucial Exams has been good value for me personally (currently $15/mo at time of writing) to simulate PBQ’s and multiple-choice questions. You won’t find a better value for the money, though you’ll find many in the community skeptical if the questions measure up to the actual level of CompTIA. I would say it’s as close as you’ll get to a testing environment outside of an actual exam, and the UI and website is always fluid.

Best Practices

1. Schedule your exam, now.

Nothing puts a fire under your butt quite like a deadline. Remember that CompTIA allows you to reschedule your exam up to 24 hours before your appointment, so the worst-case scenario is pushing it a little back, but you should be working as if you are committing to that deadline.

2. Figure out how you learn best.

Take a learning style quiz. Explore study techniques such as the pomodoro technique.

3. Eliminate distractions. Maximize productivity.

This means set your phone on focus mode/vibrate and kill your social notifications. This means you mute your Discord, Instagram, Facebook, and LinkedIn.
This means that new season, episode, or upload can wait.
It’s time to study.

4. Stick to the plan.

We already spent an entire wall of text above getting ready for this test. Don’t let a spontaneous meetup, fire sale, or anything distract you from why you are here.

5. Give yourself a break (often).

Sticking to the plan doesn’t mean study non-stop for eight hours straight. You still have to eat, sleep, and hydrate.

Leave your weekends open for seeing friends, family, and going outside. While you could use parts of the weekend to make up for pace, I wouldn’t recommend it as your brain needs time to recover and process. You could certainly share what you’ve learned with someone else, and I highly encourage it if they’re willing to entertain the idea.

6. It’s okay to slow down.

If you’re struggling with a concept or topic, that’s good. It means you’re trying your best. Reach out to your peers, find other ways to understand it, but don’t run yourself down over nothing. Remind yourself that if it was easy, everyone would do it. Challenging yourself in this way won’t always be simple and often isn’t. That’s just the nature of the beast.

7. It’s okay to fail.

We’re all afraid of not performing, but oftentimes we lose track of how far we’ve made it before we ran into failure.

Use your exam objectives as a checklist.

It’s important to keep track of our exam objectives and progress, because otherwise it would feel like we went from zero to not-hero and that would suck.

Use a journal or your notes to record any difficulties grasping a concept or term.

What did you learn from this? Did you not study enough on a practice test? Did you get hung up on terminology? Where is the source of your shortcomings? It won’t feel good to admit your weaknesses, but the sooner you do, the sooner you reach number 8.

8. It feels great to succeed and pass.

After you pass your first CompTIA cert, you’ll experience a type of high that will be hard to forget. Passing your A+ will fuel your desire to pass Net+, which will boost your confidence for Sec+. It’s a domino effect and a major reason why CompTIA recommends this path. Not only because it builds on your knowledge in succession, but it feels amazing to overcome all those steps and reach your finale. This should be the mentality you have, real progressive growth.

Don’t forget to celebrate your wins and passes with friends, family, and your peers!

Other Notable Resources

1. CompTIA Reddit

2. Professor Messer Discord

3. Professor Messer Pop Quiz E-mail List

4. Amari Williams - CompTIA A+ Certification Comprehensive Guide 2024

So, how did I do?

Leave a comment

Support me here!

Support me on Ko-Fi

Subscribe now

Share