McTwerk
Dreams and Nightmares
Getting Certs are nice. But I'd recommend on focusing on obtaining the knowledge.
Security+ is nice and all, but if you dont know anything about networking/Good with at least one OS( It's Pro's & Cons). It's useless by itself.
Most people who are in security( outside of programmers ) were system administrator/network admins first. rarely does somebody jump straight into security.
I agree that you need to do more than just collect certs. You have to prove competency in the field you are trying to enter, as you said, obtain the knowledge.
I made sure to stress "entry level" in my replies to set expectations.
The certs alone won't land you a gig, but in IT certs are fairly well respected and often times a substitute for degrees. For someone trying to get into IT, the core ComTIA certs is usually the place to begin. A+, Net+ and Sec+ can help you land an entry level job.
Also agree it is tough to jump straight into security. I put in 5+ years as a SysAdmin before landing my first security job, and now have been doing ethical hacking for the last couple years.
If people are willing to put in the time (including their own time) to learn and teach themselves, along with working their way up the cert chain in the process, it can help them begin a career in the IT industry.