Check Point CCPE-C Hacking and Securing Cloud Infrastructure Certification Preparation
This course puts you first in the attacker's seat, then in the defender's, across the three major public clouds. You enumerate AWS, Azure and GCP environments, exploit poorly protected storage, over-permissive identities and misconfigured services, then learn to detect, fix and audit those weaknesses. It maps to the Hacking and Securing Cloud Infrastructure course of Check Point's HackingPoint programme, built with NotSoSecure, and prepares you for the CCPE-C accreditation, exam 156-406. Sessions run live online, in person in Casablanca or on-site at your organization, in French or English.
The essentials
Publisher : Check Point
Certification : Check Point Certified PenTesting Expert – Cloud (CCPE-C)
Exam code : 156-406
Duration : Duration on request
Level : Intermediate
Formats : Live virtual class · In-person in Casablanca · On-site (intra-company)
Languages : French or English
Exam facts : Exam 156-406 · Pearson VUE
Exam voucher: included or optional depending on the package — contact us.
Explain the shared responsibility model and what it means for attack and defence
Enumerate a cloud environment and map its attack surface
Exploit misconfigured storage services on AWS, Azure and GCP
Attack Azure AD / Entra ID and abuse over-permissive identities and roles
Compromise AWS services such as IAM, EC2, Lambda and API Gateway
Use cloud-native defensive tools and audit a configuration against benchmarks
Put your skills to the test in a Capture the Flag
Program
Introduction to cloud computing
Service models
Shared responsibility
Enumeration and reconnaissance
Discovering exposed resources
Attack surface
Attacking cloud storage
AWS S3
Azure and GCP storage
Azure AD / Entra ID attacks
Identities and roles
Privilege escalation
Attacking AWS
IAM
EC2, Lambda, API Gateway
Exploiting GCP
Google Cloud-specific techniques
Defence, auditing and benchmarking
Cloud-native security tools
Configuration auditing
Capture the Flag
End-to-end attack scenario
Prerequisites
Basic to intermediate cybersecurity knowledge (around 18 months of experience)
Comfort with command-line syntax
Laptop with administrator rights and virtualisation software
Target audience
Cloud administrators and architects
Penetration testers and red teamers
SOC and CSIRT analysts, developers, and security or IT managers
The exam
The Check Point certification programme links this course to the CCPE-C (Cloud Security) accreditation, exam 156-406, taken with Pearson VUE. You book the exam separately from the course, whenever you feel ready. The subject spans three clouds that work quite differently, so revise each one on its own, redoing the enumeration, identity exploitation and auditing labs, before replaying the Capture the Flag from start to finish.
Preparation tips
Open trial AWS, Azure and GCP accounts to replay the scenarios
Compare the three providers' IAM models side by side
Run a configuration auditing tool on your own account
Frequently asked questions (FAQ)
Which clouds are covered?
AWS, Microsoft Azure (including Azure AD / Entra ID) and Google Cloud Platform, on both the attack and defence sides.
How does this differ from CCCS?
CCCS teaches you to deploy Check Point CloudGuard gateways. CCPE-C teaches how attackers exploit cloud weaknesses and how to defend against them, independently of Check Point products.
What is the CCPE-C exam code?
The Check Point certification programme lists exam 156-406 for this track. Contact us to confirm availability before you set a date.
What level do I need?
Around 18 months of cybersecurity experience and comfort with the command line. Some prior hands-on experience with at least one public cloud is a real plus.
Which formats and how long?
Live online, in person in Casablanca or on-site at your organization, in French or English. The length is set on request depending on the format and the team's level.