Certification study guides
Blueprint-guided study maps for vendor certification exams. Every objective from the published exam blueprint is linked to the articles, tools, and official manual pages that teach it, so you study the right things in the right order.
How these guides work
The exam blueprint is the spine. Each objective points to deterministic, grounded resources already on this site plus the vendor's own documentation. No filler, and no guessing which topics matter.
What these guides are not
These are independent study aids built from the public exam blueprint. They contain no exam questions, answers, or brain dumps, which violate every vendor's certification agreement. They help you learn the material, not shortcut the exam.
Public sources, used in good faith
These guides are independent study aids built from publicly available material: published exam blueprints, official product documentation, and vendor training catalogues. Product names, exam codes, and trademarks belong to their owners and are used only to identify the subject being taught. This site is not affiliated with or endorsed by any vendor named here. If you hold rights in material published on this page and believe it should be removed or corrected, please send the exact URL and a short note on the issue through the contact page; requests are reviewed promptly and in good faith. Read the full disclaimer →
Vendors covered
- F5The application delivery company, and the platform taught most on this site.
- Extreme NetworksBuilding RNP's metropolitan research networks, and the one vendor here that is also a platform taught today.
- FortinetFrom the NSE ladder to the trainer's chair, through a certification program reborn.
- NetskopeThe SSE teaching pillar: taught from inside the category's defining vendor.
- Ping Identity and ForgeRockThe identity chapter: two bloodlines, one platform - federation from Denver, Sun's rescued open source from Oslo.
- ZscalerZero trust at cloud scale - the company that bet the perimeter would dissolve, and built the exchange that replaced it.
- Check PointThe company that made the stateful firewall a product - and still builds the management model everything else is compared against.
Earned by passing all 5 exams, in any order.
- F5CAB1BIG-IP Administration Install, Initial Configuration, and Upgrade
- F5CAB2BIG-IP Administration Data Plane Concepts
- F5CAB3BIG-IP Administration Data Plane Configuration
- F5CAB4BIG-IP Administration Control Plane Administration
- F5CAB5BIG-IP Administration Support and Troubleshoot
An existing F5-CA, BIG-IP can be renewed by passing the recertification exam (F5CABR), or by passing all five exams again.
Earned by passing all 6 exams, in any order.
- F5CTSLTM1-BBIG-IP LTM Specialist Base Configuration and Networking Setup
- F5CTSLTM2-BBIG-IP LTM Specialist Virtual Server and Local Traffic Configuration Objects
- F5CTSLTM3-BBIG-IP LTM Specialist iRules, Analytics and Templates
- F5CTSLTM4-BBIG-IP LTM Specialist Software Upgrades, HA Configuration, and Device Monitoring
- F5CTSLTM5-BBIG-IP LTM Specialist Packet Capture/Troubleshooting - TCP/UDP/Application Layer
- F5CTSLTM6-BBIG-IP LTM Specialist Packet Capture/Troubleshooting - TLS/SSL
Prerequisite: F5-CA, BIG-IP. The six exams can be taken in any order; beta exams run until 2026-07-31, with production exams to follow. An existing F5-CTS, LTM is renewed by passing the LTM Certified Technology Specialist Recertification exam (F5CTSLTMR).
Earned by passing all 1 exams, in any order.
Earned by passing all 1 exams, in any order.
Earned by passing all 1 exams, in any order.
Earned by passing all 1 exams, in any order.
Earned by passing all 4 exams, in any order.
Earned by passing all 1 exams, in any order.
Extreme certifications are valid for two years; recertification is by retaking the assessment before expiration. Each Extreme Certified Professional requires the four track Knowledge Credentials plus the proctored one-day lab assessment. Per-credential objective blueprints, format, and pass marks are pending capture from official Extreme Networks sources.
Earned by passing all 1 exams, in any order.
Extreme certifications are valid for two years; recertification is by retaking the assessment before expiration. Each Extreme Certified Professional requires the four track Knowledge Credentials plus the proctored one-day lab assessment. Per-credential objective blueprints, format, and pass marks are pending capture from official Extreme Networks sources.
Earned by passing all 1 exams, in any order.
Extreme certifications are valid for two years; recertification is by retaking the assessment before expiration. Each Extreme Certified Professional requires the four track Knowledge Credentials plus the proctored one-day lab assessment. Per-credential objective blueprints, format, and pass marks are pending capture from official Extreme Networks sources.
Earned by passing all 1 exams, in any order.
Extreme certifications are valid for two years; recertification is by retaking the assessment before expiration. Each Extreme Certified Professional requires the four track Knowledge Credentials plus the proctored one-day lab assessment. Per-credential objective blueprints, format, and pass marks are pending capture from official Extreme Networks sources.
Earned by passing all 1 exams, in any order.
Extreme certifications are valid for two years; recertification is by retaking the assessment before expiration. Each Extreme Certified Professional requires the four track Knowledge Credentials plus the proctored one-day lab assessment. Per-credential objective blueprints, format, and pass marks are pending capture from official Extreme Networks sources.
Earned by passing all 1 exams, in any order.
Extreme certifications are valid for two years; recertification is by retaking the assessment before expiration. Each Extreme Certified Professional requires the four track Knowledge Credentials plus the proctored one-day lab assessment. Per-credential objective blueprints, format, and pass marks are pending capture from official Extreme Networks sources.
Earned by passing all 1 exams, in any order.
Extreme certifications are valid for two years; recertification is by retaking the assessment before expiration. Each Extreme Certified Professional requires the four track Knowledge Credentials plus the proctored one-day lab assessment. Per-credential objective blueprints, format, and pass marks are pending capture from official Extreme Networks sources.
Earned by passing all 1 exams, in any order.
Extreme certifications are valid for two years; recertification is by retaking the assessment before expiration. Each Extreme Certified Professional requires the four track Knowledge Credentials plus the proctored one-day lab assessment. Per-credential objective blueprints, format, and pass marks are pending capture from official Extreme Networks sources.
Earned by passing all 1 exams, in any order.
Complete the online course and test.
Valid two years. Automatically renewed by earning NSE 2 through NSE 8.
Earned by passing all 1 exams, in any order.
Complete the online course and test.
Valid two years. Renews NSE 1. Automatically renewed by earning NSE 3 or above.
Earned by passing all 1 exams, in any order.
Complete the online course AND pass the online exam.
Valid two years. Renews NSE 1 and NSE 2.
Earned by passing all 1 exams, in any order.
Pass the NSE 4 proctored exam. No prerequisite certifications.
Valid two years. Renews NSE 1, 2 and 3.
Earned by passing any one of these 3 exams.
Pass ONE of the NSE 5 Secure Networking proctored exams.
Prerequisites: NSE 4 certification
Valid two years. Renews NSE 1, 2 and 3.
Earned by passing all 1 exams, in any order.
Pass the NSE 5 Security Operations proctored exam.
Prerequisites: NSE 4 certification
Valid two years. Renews NSE 1, 2 and 3.
Earned by passing all 1 exams, in any order.
Pass the NSE 5 SASE proctored exam.
Prerequisites: NSE 4 certification
Valid two years. Renews NSE 1, 2 and 3.
Earned by passing any one of these 3 exams.
Pass ONE of the NSE 5 Cloud Security proctored exams.
Prerequisites: NSE 4 certification
Valid two years. Renews NSE 1, 2 and 3.
Earned by passing any one of these 4 exams.
Pass ONE of the NSE 6 Secure Networking proctored exams.
Prerequisites: NSE 4 certification
- NSE 6FortiAnalyzer Administrator
- NSE 6FortiManager Administrator
- NSE 6FortiNAC Administrator
- NSE 6FortiVoice Administrator
Valid two years. Renews NSE 1, 2 and 3.
Earned by passing any one of these 5 exams.
Pass ONE of the NSE 6 Security Operations proctored exams.
Prerequisites: NSE 4 certification
- NSE 6FortiDeceptor Administrator
- NSE 6FortiNDR Cloud Analyst
- NSE 6FortiRecon Analyst
- NSE 6FortiSIEM Analyst
- NSE 6FortiSOAR Analyst
Valid two years. Renews NSE 1, 2 and 3.
Earned by passing any one of these 3 exams.
Pass ONE of the NSE 6 SASE proctored exams.
Prerequisites: NSE 4 certification
Valid two years. Renews NSE 1, 2 and 3.
Earned by passing any one of these 4 exams.
Pass ONE of the NSE 6 Cloud Security proctored exams.
Prerequisites: NSE 4 certification
- NSE 6FortiCNAPP Analyst
- NSE 6FortiDDoS Administrator
- NSE 6FortiMail Administrator
- NSE 6FortiMail Workspace Administrator
Valid two years. Renews NSE 1, 2 and 3.
Earned by passing all 1 exams, in any order.
Pass the NSE 7 Secure Networking proctored exam.
Prerequisites: NSE 4 certification · NSE 5 or NSE 6 certification in Secure Networking
Valid two years. Renews NSE 1, 2, 3, 4, and NSE 5 and 6 in the same track.
Earned by passing all 1 exams, in any order.
Pass the NSE 7 Security Operations proctored exam. Fortinet's certification table lists only the NSE 5 or NSE 6 prerequisite for this track, without the NSE 4 requirement shown on the other three; transcribed as published.
Prerequisites: NSE 5 or NSE 6 certification in Security Operations
Valid two years. Renews NSE 1, 2, 3, 4, and NSE 5 and 6 in the same track.
Earned by passing all 1 exams, in any order.
Pass the NSE 7 SASE proctored exam.
Prerequisites: NSE 4 certification · NSE 5 or NSE 6 certification in SASE
Valid two years. Renews NSE 1, 2, 3, 4, and NSE 5 and 6 in the same track.
Earned by passing all 1 exams, in any order.
Pass the NSE 7 Cloud Security proctored exam.
Prerequisites: NSE 4 certification · NSE 5 or NSE 6 certification in Cloud Security
Valid two years. Renews NSE 1, 2, 3, 4, and NSE 5 and 6 in the same track.
Pass the NSE 8 core exam AND pass one of the NSE 8 elective exams.
Prerequisites: NSE 4 certification · NSE 5 or NSE 6 certification · NSE 7 certification (same track as the NSE 5 or NSE 6)
- NSE 8NSE 8 Core Practical Exam
- NSE 8NSE 8 Secure Networking Practical Exam
- NSE 8NSE 8 Application Security Practical Exam
- NSE 8NSE 8 Security Operations Practical Exam
Valid two years, renewed by accumulating activity points. Passing any NSE 8 practical exam renews all active NSE 1 to 7 certifications.
Earned by passing all 1 exams, in any order.
Pass the proctored exam. Sits outside the eight-level structure.
Prerequisites: NSE 4 certification · NSE 5 or NSE 6 certification · NSE 7 certification (same track as the NSE 5 or NSE 6)
Valid two years. Does not renew other certifications.
Earned by passing all 1 exams, in any order.
Pass the proctored exam. Sits outside the eight-level structure.
Prerequisites: NSE 4 certification · NSE 5 or NSE 6 certification · NSE 7 certification (same track as the NSE 5 or NSE 6)
Valid two years. Does not renew other certifications.
Earned by passing all 1 exams, in any order.
Valid for two years from the date of award, based on the actual date the exam is successfully completed through Netskope Academy. 60 questions, 90 minutes. This accreditation replaces the former Netskope Certified Cloud Security Administrator certification (NSK101).
Earned by passing all 1 exams, in any order.
Valid for two years from the date of award, based on the actual date the exam is successfully completed through Netskope Academy. 60 questions, 90 minutes. This accreditation replaces the former Netskope Certified Cloud Security Integrator certification (NSK200).
Earned by passing all 1 exams, in any order.
Valid for two years from the date the exam is passed at Pearson VUE. This certification replaced the former Administrator accreditation in 2022 and was itself replaced by the 2024 Netskope Administrator Accreditation (Academy-delivered); the published blueprint remains the reference for the credential line. Exam: 90 minutes, Pearson VUE.
Earned by passing all 1 exams, in any order.
Valid for two years from the date the exam is passed at Pearson VUE. This certification replaced the former Integrator accreditation in 2022 and was itself replaced by the 2024 Netskope Integrator Accreditation (Academy-delivered); the published blueprint remains the reference for the credential line. Exam: 90 minutes, Pearson VUE.
Earned by passing all 1 exams, in any order.
Valid for two years from the date the exam is passed at Pearson VUE. This certification replaced the former Cloud Security Elite accreditation in 2022. An Architect Accreditation exists in the current 2024 Academy program, but no standalone blueprint for it has been published; this NSK300 blueprint remains the architect tier’s published reference. Exam: 90 minutes, Pearson VUE.
Earned by passing all 1 exams, in any order.
The credential is valid for 3 years. Recertification means retaking and passing the exam, no earlier than 3 months before the expiration date (exam fees apply to recertification attempts).
Earned by passing all 1 exams, in any order.
Credential valid for 3 years; renewal is by retaking and passing the exam, attemptable from 3 months before expiration. Proctored by Kryterion, remote or at a testing center. Exam based on PingAccess version 8 or later. Facts per the official Certification Guide (certification-exams-policies-procedures.pdf) + training.pingidentity.com/certification catalog, verified 2026-07-22.
Earned by passing all 1 exams, in any order.
Credential valid for 3 years; renewal is by retaking and passing the exam, attemptable from 3 months before expiration. Proctored by Kryterion, remote or at a testing center. The exam name is the official identifier; a Kryterion catalog code was not verified from official sources this session. Facts per the official Certification Guide (certification-exams-policies-procedures.pdf) + training.pingidentity.com/certification catalog, verified 2026-07-22.
Earned by passing all 1 exams, in any order.
Credential valid for 3 years; renewal is by retaking and passing the exam, attemptable from 3 months before expiration. Proctored by Kryterion, remote or at a testing center. The exam name is the official identifier; a Kryterion catalog code was not verified from official sources this session. Facts per the official Certification Guide (certification-exams-policies-procedures.pdf) + training.pingidentity.com/certification catalog, verified 2026-07-22.
Earned by passing all 1 exams, in any order.
Credential valid for 3 years; renewal is by retaking and passing the exam, attemptable from 3 months before expiration. Proctored by Kryterion, remote or at a testing center. The exam name is the official identifier; a Kryterion catalog code was not verified from official sources this session. Facts per the official Certification Guide (certification-exams-policies-procedures.pdf) + training.pingidentity.com/certification catalog, verified 2026-07-22.
Earned by passing all 1 exams, in any order.
Credential valid for 3 years; renewal is by retaking and passing the exam, attemptable from 3 months before expiration. Proctored by Kryterion, remote or at a testing center. Exam based on PingAM version 7 (the product formerly ForgeRock Access Management). Facts per the official Certification Guide (certification-exams-policies-procedures.pdf) + training.pingidentity.com/certification catalog, verified 2026-07-22.
Earned by passing all 1 exams, in any order.
Credential valid for 2 years; renewal is by retaking and passing the exam, attemptable from 3 months before expiration. Proctored by Kryterion, remote or at a testing center. Formerly the ForgeRock Identity Cloud certification. Facts per the official Certification Guide (certification-exams-policies-procedures.pdf) + training.pingidentity.com/certification catalog, verified 2026-07-22.
Earned by passing all 1 exams, in any order.
Credential valid for 3 years; renewal is by retaking and passing the exam, attemptable from 3 months before expiration. Proctored by Kryterion, remote or at a testing center. The product formerly ForgeRock Identity Management. Facts per the official Certification Guide (certification-exams-policies-procedures.pdf) + training.pingidentity.com/certification catalog, verified 2026-07-22.
Earned by passing all 1 exams, in any order.
Credential valid for 2 years; renewal is by retaking and passing the exam, attemptable from 3 months before expiration. Proctored by Kryterion, remote or at a testing center. Delivered on PingOne Advanced Identity Cloud with the Identity Governance functionality. Facts per the official Certification Guide (certification-exams-policies-procedures.pdf) + training.pingidentity.com/certification catalog, verified 2026-07-22.
Earned by passing all 1 exams, in any order.
Expert-tier credential for PingFederate (PRIME ruling 2026-07-22: Expert tier in scope). Per the official Certification Guide, Certified Expert exams may be multiple-choice or practical lab-based, proctored by Kryterion remotely or at a testing center; renewal is by retaking the exam, attemptable from 3 months before expiration. Per-exam format, length, and pass mark not captured from official sources this session.
Earned by passing all 1 exams, in any order.
Expert-tier credential for PingAccess (PRIME ruling 2026-07-22: Expert tier in scope). Per the official Certification Guide, Certified Expert exams may be multiple-choice or practical lab-based, proctored by Kryterion remotely or at a testing center; renewal is by retaking the exam, attemptable from 3 months before expiration. Per-exam format, length, and pass mark not captured from official sources this session.
Earned by passing all 1 exams, in any order.
Expert-tier credential for PingDirectory (PRIME ruling 2026-07-22: Expert tier in scope). Per the official Certification Guide, Certified Expert exams may be multiple-choice or practical lab-based, proctored by Kryterion remotely or at a testing center; renewal is by retaking the exam, attemptable from 3 months before expiration. Per-exam format, length, and pass mark not captured from official sources this session.
Earned by passing all 1 exams, in any order.
Expert-tier credential for PingOne (PRIME ruling 2026-07-22: Expert tier in scope). Per the official Certification Guide, Certified Expert exams may be multiple-choice or practical lab-based, proctored by Kryterion remotely or at a testing center; renewal is by retaking the exam, attemptable from 3 months before expiration. Per-exam format, length, and pass mark not captured from official sources this session.
Earned by passing all 1 exams, in any order.
Expert-tier credential for PingOne Advanced Identity Cloud (PRIME ruling 2026-07-22: Expert tier in scope). Per the official Certification Guide, Certified Expert exams may be multiple-choice or practical lab-based, proctored by Kryterion remotely or at a testing center; renewal is by retaking the exam, attemptable from 3 months before expiration. Per-exam format, length, and pass mark not captured from official sources this session.
Earned by passing all 1 exams, in any order.
Expert-tier credential for PingAM (PRIME ruling 2026-07-22: Expert tier in scope). Per the official Certification Guide, Certified Expert exams may be multiple-choice or practical lab-based, proctored by Kryterion remotely or at a testing center; renewal is by retaking the exam, attemptable from 3 months before expiration. Per-exam format, length, and pass mark not captured from official sources this session.
Earned by passing all 1 exams, in any order.
Earned by passing all 1 exams, in any order.
Valid for two years. A CCSA cannot be extended by passing Infinity Specialist Accreditation exams: recertify by passing the CCSA again within six months of expiry, or advance to the CCSE.
Earned by passing all 1 exams, in any order.
Prerequisites: CCSA certification (any R8x or newer; it may be expired)
Valid for two years, and can be extended by one year by passing one Infinity Specialist Accreditation exam. Passing a second ISA upgrades the holder to CCSM.
Not earned by a dedicated exam. Awarded to a holder of an ACTIVE CCSE who then passes two Check Point Specialist accreditation exams. Check Point's own two pages name these differently: checkpoint.com calls them Check Point Specialist accreditations and the Pearson VUE program page calls them Infinity Specialist Accreditations (ISA).
Prerequisites: An active CCSE certification
Valid for two years. Can be extended by one year by passing one further Specialist accreditation; a second one upgrades the holder to CCSM Elite.
Not earned by a dedicated exam. Awarded to a CCSM who passes two further Specialist accreditation exams, which is four in total across the path.
Prerequisites: An active CCSM certification
Can be extended indefinitely, one year at a time, for each additional Specialist accreditation passed.
Earned by passing all 1 exams, in any order.
An Infinity Specialist Accreditation. Valid for two years and not itself extendable, though it may be retaken within six months of expiry for a fresh two-year term. Passed after a valid CCSE it extends that certification by a year; a second one awards the CCSM.
Valid for two years. Retaking the same accreditation renews it for two years but does not extend a core certification a second time - a different accreditation is needed for that.
Earned by passing all 1 exams, in any order.
An Infinity Specialist Accreditation. Valid for two years and not itself extendable, though it may be retaken within six months of expiry for a fresh two-year term. Passed after a valid CCSE it extends that certification by a year; a second one awards the CCSM.
Valid for two years. Retaking the same accreditation renews it for two years but does not extend a core certification a second time - a different accreditation is needed for that.
Earned by passing all 1 exams, in any order.
An Infinity Specialist Accreditation. Valid for two years and not itself extendable, though it may be retaken within six months of expiry for a fresh two-year term. Passed after a valid CCSE it extends that certification by a year; a second one awards the CCSM.
Valid for two years. Retaking the same accreditation renews it for two years but does not extend a core certification a second time - a different accreditation is needed for that.
Earned by passing all 1 exams, in any order.
An Infinity Specialist Accreditation. Valid for two years and not itself extendable, though it may be retaken within six months of expiry for a fresh two-year term. Passed after a valid CCSE it extends that certification by a year; a second one awards the CCSM.
Valid for two years. Retaking the same accreditation renews it for two years but does not extend a core certification a second time - a different accreditation is needed for that.
Earned by passing all 1 exams, in any order.
An Infinity Specialist Accreditation. Valid for two years and not itself extendable, though it may be retaken within six months of expiry for a fresh two-year term. Passed after a valid CCSE it extends that certification by a year; a second one awards the CCSM.
Valid for two years. Retaking the same accreditation renews it for two years but does not extend a core certification a second time - a different accreditation is needed for that.
Earned by passing all 1 exams, in any order.
An Infinity Specialist Accreditation. Valid for two years and not itself extendable, though it may be retaken within six months of expiry for a fresh two-year term. Passed after a valid CCSE it extends that certification by a year; a second one awards the CCSM.
Valid for two years. Retaking the same accreditation renews it for two years but does not extend a core certification a second time - a different accreditation is needed for that.
Earned by passing any one of these 2 exams.
An Infinity Specialist Accreditation. Valid for two years and not itself extendable, though it may be retaken within six months of expiry for a fresh two-year term. Passed after a valid CCSE it extends that certification by a year; a second one awards the CCSM.
Prerequisites: A passed CCSA or CCSE (R80 or newer). It may be expired.
- 156-583Check Point Certified Troubleshooting Administrator R82 (CCTA)
- 156-582Check Point Certified Troubleshooting Administrator - R81.20 (CCTA)
Valid for two years. Retaking the same accreditation renews it for two years but does not extend a core certification a second time - a different accreditation is needed for that.
Earned by passing any one of these 2 exams.
An Infinity Specialist Accreditation. Valid for two years and not itself extendable, though it may be retaken within six months of expiry for a fresh two-year term. Passed after a valid CCSE it extends that certification by a year; a second one awards the CCSM.
Prerequisites: A passed CCSE (R80 or newer). It may be expired.
- 156-588Check Point Certified Troubleshooting Expert - R82 (CCTE)
- 156-587Check Point Certified Troubleshooting Expert - R81.20 (CCTE)
Valid for two years. Retaking the same accreditation renews it for two years but does not extend a core certification a second time - a different accreditation is needed for that.
Earned by passing all 1 exams, in any order.
An Infinity Specialist Accreditation. Valid for two years and not itself extendable, though it may be retaken within six months of expiry for a fresh two-year term. Passed after a valid CCSE it extends that certification by a year; a second one awards the CCSM.
Valid for two years. Retaking the same accreditation renews it for two years but does not extend a core certification a second time - a different accreditation is needed for that.
A HackingPoint course credential, NOT an Infinity Specialist Accreditation. Check Point lists these in their own table, separate from the certification program model, and they do NOT count toward the CCSM or CCSM Elite - only ISAs do that. Exams are delivered at Pearson VUE.
A HackingPoint course credential, NOT an Infinity Specialist Accreditation. Check Point lists these in their own table, separate from the certification program model, and they do NOT count toward the CCSM or CCSM Elite - only ISAs do that. Exams are delivered at Pearson VUE.
A HackingPoint course credential, NOT an Infinity Specialist Accreditation. Check Point lists these in their own table, separate from the certification program model, and they do NOT count toward the CCSM or CCSM Elite - only ISAs do that. Exams are delivered at Pearson VUE.
A HackingPoint course credential, NOT an Infinity Specialist Accreditation. Check Point lists these in their own table, separate from the certification program model, and they do NOT count toward the CCSM or CCSM Elite - only ISAs do that. Exams are delivered at Pearson VUE.
A HackingPoint course credential, NOT an Infinity Specialist Accreditation. Check Point lists these in their own table, separate from the certification program model, and they do NOT count toward the CCSM or CCSM Elite - only ISAs do that. Exams are delivered at Pearson VUE.