Cloud security

Cloud Pentesting Certification Boot Camp: The ultimate guide

September 16, 2020 by Howard Poston

What is a Certified Cloud Penetration Tester (CCPT) certification?

The CCPT certification is offered by the Infosec Institute to validate an applicant’s skills in cloud hacking and penetration testing. The certification is designed to demonstrate that an applicant has expert-level knowledge regarding Azure and AWS penetration testing and experience in using cloud-based pentesting tools.

What do I need to know to earn a Certified Cloud Penetration Tester (CCPT) certification?

The Infosec Institute defines five areas of knowledge that will be tested in the CCPT certification exam:

  • Common vulnerabilities in cloud environments
  • Security features of popular cloud platforms
  • Cloud pentesting process and requirements
  • Cloud pentesting tools
  • Reporting cloud pentest findings and providing recommendations

The Cloud Pentesting Certification Boot Camp ensures that a student will leave with in-depth knowledge and the required skills in each of these areas. The boot camp includes a mixture of lecture — covering theory and important concepts — and hands-on exercises to ensure that a student has the knowledge and experience necessary to pass both the certification exam and succeed as a cloud penetration tester.

Is there a demand for cloud penetration testing skills?

Organizations are increasingly moving critical data processing and storage to cloud environments. In fact, 93% of enterprises are using multiple cloud environments.

With this increased reliance on the cloud comes a growing need for cloud security professionals. Since many cybersecurity professionals lack an understanding of fundamental cloud security concepts, organizations are looking for cloud security specialists. In fact, cloud security is the top cloud skill that companies are looking for in 2020.

With the need for cloud security comes a need to test that an organization’s cloud-focused cybersecurity defenses are effective. As a result, cloud penetration testing skills are definitely in demand.

How do I earn the Certified Cloud Penetration Tester (CCPT) certification?

The CCPT certification can be earned by passing a fifty-question multiple-choice exam administered by the Infosec Institute. The Infosec Institute has multiple different training locations or can provide on-site training for groups of ten or more students. If you are an employee of one of the Infosec Institute’s member organizations, then it may be possible to take the exam over the internet.

Registration for the CCPT exam requires the purchase of an exam voucher. A free exam voucher is included with the CCPT Certification Boot Camp.

What experience or knowledge is required?

There are no prerequisites to sit for the CCPT exam. However, some fundamental knowledge and skills are recommended before enrolling in the CCPT bootcamp, including:

  • Familiarity with cloud environments
  • Basic knowledge of pentesting concepts
  • One year in an information security job role or equivalent knowledge and experience

While none of these are required to register for the bootcamp, they enable a student to get the most benefit out of the experience. Without the right foundation, a student may have difficulty grasping core concepts that are necessary for passing the CCPT exam and for acting as an effective cloud penetration tester.


The CCPT certification verifies that the certificate holder has expert-level knowledge and skills in penetration testing cloud environments. The Infosec Cloud Pentesting Certification Boot Camp fully prepares the student to pass the CCPT exam and to operate as a certified penetration tester for cloud environments.



  1. Certified Cloud Penetration Tester (CCPT), Infosec Institute
  2. Cloud Penetration Testing Boot Camp, Infosec
  3. Cloud Computing Trends: 2020 State of the Cloud Report, Flexera Blog
  4. Survey: 84% of Security Pros Said Their Organizations Struggled to Maintain Security Configurations in the Cloud, The State of Security
  5. The Top Cloud Skills in Demand for 2020, Akraya
Posted: September 16, 2020
Howard Poston
View Profile

Howard Poston is a cybersecurity researcher with a background in blockchain, cryptography and malware analysis. He has a master's degree in Cyber Operations from the Air Force Institute of Technology and two years of experience in cybersecurity research and development at Sandia National Labs. He currently works as a freelance consultant providing training and content creation for cyber and blockchain security.