Certification upgrade path

[Christoph]

Hello,

I'm confused and hope someone can help me out. Primary goal is not to lose the CCSM.

I understand that each Infinity specialization extends the CCSM another year. Two is the maximum possible, as you then get the CCSME.

I look at my certs, some of which are quite old:

• CCSA -> Core
• CCSE -> Core
• CCTA -> Infinity 1. (unknown Version - not listed)
• CCCS -> Infinity 2. (unknown Version - not listed)
• CCSM -> Core
• CCTE R81 -> Infinity 3. (Here I am)
  < ???> -> Infinity 4.

So I have the following options (besides the hacking point) for an infinity cerification:

Check Point Certified Automation Specialist - R81.20
Check Point Certified Maestro Expert - R81
Check Point Certified Cloud Specialist - R81.20
Check Point Certified Harmony Endpoint Specialist - R81.20
Check Point Certified Multi-Domain Security Management Specialist - R81
Check Point Certified Virtual System Extension Specialist- R81
Check Point Certified Troubleshooting Administrator - R81.20
Check Point Certified Troubleshooting Expert - R81.20
Threat Prevention Specialist

My questions are:

1. Would any of the previously listed certs (CCTA, CCTE, CCCS) extend the CCSM, as they are most definitly a newer version. Like are different versions = different inifinity specializations?

2. If they would extend the CCSM, would they also upgrade the CCSM to a CCSME? Fictional, non-existing example CCTAR77+CCTA80+CCTAR81+CCTAR82 = CCSME, or better example. CCCS+CCTA+CCTE R81 + new CCTE R81.20 = CCSME

3. If these options do not work, any advice which cert to aim for if time is an issue?

1. Maestro is out, no hands on experience.
2. VSX, MDM I'm just working with, no real debug experience.
3. Automation, not very often doing that stuff and then mostly specific scenarios.
4. Have to look a lot up. Harmony Endpoint - very extensive topic (On prem/cloud) - Sometimes working with it.
5. Threat Prevention Specialist, new cert, sounds the easiest from the course description, then again, this can get as complicated as it gets.

End remark:

To be honest, I would prefer option 1 or 2. I just want to extend the CCSM the fastest way possible. Take the exam, check if I know the things that have changed an be done with it. I do not need the CCSME right now, but it feels that if I do not specialize in another topic, I lose everything and can start from the beginning and have to take 4 exams (2 core + 2 Infinity specializations) again.

[Vincent_Bacher]

I am not an certification expert but from my end I would say

1. Yes, retaking works.

Taking a newer version of a cert you already have (like the CCTA R81.20 or CCTE R81.20) will absolutely extend your current CCSM for another year. You don't need to learn a brand new topic just to keep your status.

2. No, it won't make you "Elite" yet.

To get the CCSM Elite, you need 4 completely different specializations. Updating an old one doesn't count as a new "pillar." But since you said you don't need Elite right now, this doesn't matter.

if I am wrong anybody will correct me soon.

[the_rock]

Hey Christoph,

I believe below sk would have all the update info.

https://support.checkpoint.com/results/sk/sk163417

[Don_Paterson]

Good call.

The actual scenario is not covered but the word smithing makes me think it's not allowed:

"You can do this one time for a one-year extension on a valid CCSM"

• I have a valid CCSM. What are the next steps to maintain an Active certification status?
  

  Extend the CCSM certification while the certification is still valid by passing one Infinity Specialist Accreditation (ISA) exam for a one-year extension.
  
  You can do this one time for a one-year extension on a valid CCSM. Passing a second ISA exam will award you the CCSM Elite certification.

[Christoph]

Thank you for the throughout explanation in your other post. Yes, it's probably not intended to do like 4 consecutive i.e. CCCS (under the pretext the former is expired) and gain a CCSME.

I will probably take the Threat Prevention exam, and if time allows the course.

[Don_Paterson]

You are welcome.

You should always ask the question, and this is a great place to do it. 

I have seen a case where doing a Specialist exam a second time, after a period of time, worked in the students favour, but it was not the same scenario and was confirmed by Jason.

You can consider contacting your regional ATC and ask them if they have any options to help in your situation.

[Don_Paterson]

You would start at CCSE level/exam if you hit the worst case scenario. 

For your ideal scenario you probably need an authoritative answer from Check Point. @Jason_Tugwell  can jump in here. 

I would encourage you to seek CCSME and to do a new Specialist exam. 

You'd get a 2 year CCSME certification rather than a possible extension (if option 1 is possible and it works that way)  

Its all about the spirit of the certification path and certification rather than the number of exams. 

I recommend CTPS. It is a very interesting course and has great labs. It covers IPS, AB and AV very well and has great labs. 

Another recommendation I make to CCSME and other students is to get CCSME and then as soon as possible pass as many Specialist exams as you can (or want to) as soon as you can after achieving CCSME. 

Each Specialist exam you do after achieving CCSME gives you a one year extension to CCSME. 

There are CCSME certified people who have the CCSME valid until 2033 and beyond. Me included. 

It's easier if your job requires the courses and exams but for anyone who can and does go the distance they are rewarded with a long lasting high-level certification. 

I appreciate its not for everyone but it's out there for anyone who can. 

BTW. CCTA R82 is out now. The course. 

No exam for it yet but the exam will follow in the next few months. Its currently under development. 

Another great course. Lots more focus on packet capturing and analysis on the cli and with Wireshark. Plus troubleshooting CCSA R82 topics, including IA and APPI & URLF. 

[BertEtienne]

Hi Don,

If i understand correctly, attaining/renewing an ISA additively extends your current CCSM/CCSM Elite?

As in you obtained CCSME and then attained/renewed basically most ISAs, to have it be extended to 2033?

Or are there other ways to extend it this way?

Additionally, is there a need to extend your CCSE if you're already CCSM/CCSME, besides the fact to maybe refresh the topics in newer versions?

Thanks,

Bert

[Don_Paterson]

Hi Bert,

Yes, it is additive, under the current rules. 

The FAQ and my experience confirms it. 

I have done enough Specialist exams (Accreditation exams) to extend my CCSME to 2035. 

Since getting CCSME I have done quite a few Specialist exams. 

The third version of CCTA course has just been released. The exam will follow soon and I will do that one too. 

I have passed the exam for both previous versions and I have done the same for most of the other Specialist exams. 

CCTE R82 is under development now and the exam will follow its release in this year. 

No need to consider CCSE again after achieving CCSM. From there it's about extending CCSM by one year (after the next Specialist exam is passed) and then CCSME (after the second Specialist exam is passed since getting CCSM (and while CCSM is valid)). 

The FAQ will show any rule changes so that is a good SK to bookmark. 

Regards,

Don

[Don_Paterson]

PS. I do also take each version of CCSA and CCSE exam when they are released (eventually) so I guess my CCSE stays current but I'd have to actually log in and check to know. I haven't done that. 

Its part of my job and in my best interest to do all the exams.