Reddit mentions of The Network Security Test Lab: A Step-by-Step Guide

http://blog.cobaltstrike.com/2011/11/04/my-virtualbox-penetration-testing-lab/

Also

https://www.amazon.com/gp/aw/d/1118987055/ref=pd_aw_sim_14_of_11?ie=UTF8&dpID=51fSOCak78L&dpSrc=sims&preST=_SL500_SR100%2C100_&psc=1&refRID=J746RJZD39BK4A8DAPMZ

Hope these links help some!

Part of that "80%" can be a sales tactic to get you to sign up and take the course. Although I am not in the UK so I am not sure if that stat holds true.

As for the equipment: Both the below links are good starting points. The top one is a bit older.

Build Your Own Security Lab: A Field Guide for Network Testing

[The Network Security Test Lab: A Step-by-Step Guide] (https://www.amazon.com/Network-Security-Test-Step-Step/dp/1118987055/ref=asap_bc?ie=UTF8)

Both will give you a good idea and a starting point.

But you never really answered a key question: What is it you want to do? In CyberSecurity, there are roughly 40 different types of emphasis that you can focus on. I know it is daunting, but understand your personality and goals can weigh heavily into that decision. Not everyone is cut out to be a WhiteHat, but that does not mean a blue team member or a purple team member are not for you.

There was a really good topic discussion on Reddit (unable to find it currently) that had quite a few jobs broken down and what they do/mean to the Security Community.