What is the CCPE-AIH certification?
The Check Point CCPE Advanced Infrastructure Hacking (CCPE-AIH, exam 156-409) validates expert-level infrastructure penetration testing skills. It covers IPv6 exploitation, database attacks, Windows AV evasion, Active Directory compromise, Linux kernel exploitation, container breakouts, and cloud-specific attack techniques.
Who should take the CCPE-AIH course?
Experienced penetration testers, red team operators, and senior security professionals who want to advance to expert-level infrastructure attack techniques. Candidates should have completed CCPE-I (156-402) or have equivalent hands-on penetration testing experience.
What makes CCPE-AIH different from CCPE-I?
CCPE-I covers foundational infrastructure hacking. CCPE-AIH advances into expert-level techniques including IPv6 exploitation, AMSI bypass, AV evasion, C2 frameworks, cross-domain AD attacks, Linux kernel exploitation, Docker/Kubernetes breakouts, and cloud-specific attacks across AWS, Azure, and GCP.
What is covered in the Active Directory module?
The AD module covers delegation reviews, Pass the Hash/Ticket, cross-domain and forest attacks, lateral movement, pivoting, C2 framework operation, and advanced persistence techniques including Golden Ticket and Diamond Ticket attacks against Windows Server 2016 environments.
How many questions are on the 156-409 exam?
The exam contains approximately 60 multiple-choice questions with a 90-minute time limit. The passing score is 70%, delivered via Pearson VUE either online proctored or at an authorised test centre.
What does Zetlan Technologies offer for CCPE-AIH preparation?
Zetlan provides expert-led Advanced Infrastructure Hacking training covering all six modules β from IPv6 OSINT through cloud attacks β with live online sessions, advanced infrastructure lab access, and comprehensive study materials.