Unfortunately this makes sense. From an Information Security standpoint, it is EXTREMELY common to have candidates apply that are completely self taught and have been brainwashed by the InfoSec certification industry to believe if they buy the course and get their cert, they get a job. They have absolutely zero practical experience with networking or enterprise environments in general. It’s very disheartening to see the influx of these types of certification companies advertising to individuals how prestigious passing their course will made them when it’s just not true at all.