The Certified Cloud Pentesting eXpert (CCPenX-AWS) exam is an expert-level exam that evaluates a candidate’s practical expertise in the field of AWS cloud security through real world scenario-based challenges in AWS cloud environments.
The Certified Cloud Pentesting eXpert (CCPenX-AWS) exam caters to security professionals, including cloud security engineers, security analysts, penetration testers, red team members, and individuals with a strong interest in cloud security. This exam evaluates candidates' in-depth knowledge of cloud security exploitation and their ability to demonstrate expertise in this field.
This will be a practical CTF-style exam. The time duration of the exam is 7 hours. The exam can be taken online, anytime (on-demand) and from anywhere. The exam will cover a variety of questions to test candidate's ability to identify and exploit various vulnerabilities on the AWS cloud environment.
The pass criteria are as follows:
This exam is an expert-level exam which will evaluate and validate candidate's expertise in conducting penetration testing on AWS cloud environments. It covers a wide array of subjects related to exploiting cloud security, with a particular emphasis on AWS services. Candidates should have in-depth knowledge of identifying and exploiting cloud security misconfigurations, web application exploitation on cloud and leveraging exposed credentials in the application infrastructure.
It is recommended that candidates should have at least 5 years of professional pentesting experience and at least 12 months of cloud security experience to take this exam.
On completing the exam, each candidate will receive:
Candidates, who fail the exam, are allowed 1 free exam retake within the exam fees.
The exam will allow candidates to demonstrate their understanding of AWS Cloud Security. This will help them to advance in their career.
The certificate does not have an expiration date. However, the passing certificate will mention the details of the exam such as the exam version and the date. As the exam is updated over time, candidates should retake the newer version as per their convenience.
Being an independent certifying authority, we (The SecOps Group) do not provide any training for the exam. Candidates should carefully go over each topic listed in the syllabus and make sure they have adequate understanding, required experience and practical knowledge of these topics. Further, the following independent resources can be utilised to prepare for the exams.