Part of Career — industry exam preparation maps — separate from CYNARKS course completion certificates.

Career · exam prep

Industry certifications

25 vendor / professional exams mapped to CYNARKS modules. Passing an industry exam is never the same as finishing a CYNARKS course.

Foundation

CompTIA · SY0-701

CompTIA Security+

Beginneractive

Broad security vocabulary, risk, architecture, and security operations.

Prerequisites: Recommended: Network+ or equivalent networking basics
Exam format: Multiple choice + performance-based questions (PBQs)
Cost: Verify with issuer
Validity: Typically 3 years with continuing education options
Renewal: Continuing Education (CE) / renewal via CompTIA — verify current rules
Last verified: 2026-11-06

Recommended CYNARKS modules

Cybersecurity Fundamentals Networking Fundamentals Security Fundamentals

Preparation labs / resources

Practice assessments

/quizzes
Vendor practice tests (separate purchase)

Official exam page ↗Good first certification. Reinforce theoretical knowledge with practical labs.

GIAC / SANS · GSEC

GIAC Security Essentials (GSEC)

Intermediateactive

Practical security engineering, systems, networks, and defensive fundamentals.

Prerequisites: Hands-on security engineering fundamentals
Exam format: Proctored multiple choice
Cost: Verify with issuer
Validity: 4-year renewal cycle (GIAC)
Renewal: GIAC renewal / CPE — verify
Last verified: 2026-11-06

Recommended CYNARKS modules

Security Fundamentals System Security Networking Fundamentals

Preparation labs / resources

/labs

Practice assessments

GIAC practice (separate)

Official exam page ↗Broad practical security credential. Consider the cost of GIAC preparation.

Blue / SOC

CompTIA · CS0-003

CompTIA Cybersecurity Analyst (CySA+)

Intermediateactive

Security analytics, detection, vulnerability management, and incident response.

Prerequisites: Security+ or equivalent SOC/IR experience recommended
Exam format: Multiple choice + PBQs
Cost: Verify with issuer
Validity: Typically 3 years
Renewal: CompTIA CE — verify
Last verified: 2026-11-06

Recommended CYNARKS modules

Security Operations / SOC Incident Response Blue Teaming Threat Intelligence

Preparation labs / resources

Practice assessments

/quizzes

Official exam page ↗Pairs well with SIEM investigations and practical defensive exercises.

Offense

INE Security (eLearnSecurity)

eLearnSecurity Junior Penetration Tester (eJPT)

Beginner–Intermediateactive

Practical penetration testing, networking, enumeration, and exploitation fundamentals.

Prerequisites: Networking + basic Linux; ethical hacking fundamentals
Exam format: Practical lab exam
Cost: Verify with issuer
Validity: 3 years (INE Security)
Renewal: Verify renewal options on INE
Last verified: 2026-11-06

Recommended CYNARKS modules

Ethical Hacking Networking Fundamentals Web Application Security

Preparation labs / resources

Practice assessments

/quizzes
INE labs (separate)

Official exam page ↗A practical entry-level offensive security pathway.

OffSec · OSCP (exam via PEN-200 path)

Offensive Security Certified Professional (OSCP)

Advancedactive

Hands-on penetration testing, enumeration, exploitation, and professional reporting.

Prerequisites: Strong Linux, networking, enumeration; PEN-200 or equivalent lab hours
Exam format: 24-hour practical penetration test + report
Cost: Verify with issuer
Validity: Classic OSCP does not expire
Renewal: OSCP+ is a separate renewing credential (typically 3 years) — do not conflate with classic OSCP
Last verified: 2026-11-06

Recommended CYNARKS modules

Penetration Testing Linux & Windows Fundamentals Active Directory & Windows Security

Preparation labs / resources

Practice assessments

OffSec labs / Proving Grounds (separate)

Official exam page ↗Requires substantial practical preparation. CYNARKS completion does not award OSCP. Classic OSCP does not expire; OSCP+ is a separate renewing credential.

TCM Security

Practical Network Penetration Tester (PNPT)

Intermediate–Advancedactive

Practical network penetration testing, Active Directory, and professional reporting.

Prerequisites: Practical pentest fundamentals + AD basics
Exam format: Practical assessment (typically multi-day) + professional report — verify current format on TCM
Cost: Verify with issuer
Validity: Does not expire (TCM Security)
Renewal: Verify with issuer
Last verified: 2026-11-06

Recommended CYNARKS modules

Penetration Testing Active Directory & Windows Security Networking Fundamentals

Preparation labs / resources

Practice assessments

TCM practicals (separate)

Official exam page ↗Strong emphasis on practical assessment and communicating findings.

CompTIA

CompTIA PenTest+

Intermediateactive

Penetration testing methodology, assessment planning, tools, and reporting.

Prerequisites: Network+/Security+ or equivalent recommended
Exam format: Multiple choice + PBQs
Cost: Verify with issuer
Validity: Typically 3 years
Renewal: CompTIA CE — verify current exam code before booking
Last verified: 2026-11-06

Recommended CYNARKS modules

Ethical Hacking Penetration Testing Web Application Security

Preparation labs / resources

Practice assessments

/quizzes

Official exam page ↗Check the currently available exam version before scheduling.

Web / Bounty

PortSwigger

Burp Suite Certified Practitioner

Intermediateactive

Practical web application vulnerability discovery and exploitation using Burp Suite.

Prerequisites: Web security fundamentals; PortSwigger Web Security Academy
Exam format: Practical exam in Burp Suite
Cost: Verify with issuer
Validity: 5 years (PortSwigger)
Renewal: Verify renewal / re-certification on PortSwigger
Last verified: 2026-11-06

Recommended CYNARKS modules

Web Fundamentals Web Application Security

Preparation labs / resources

Practice assessments

Web Security Academy labs

Official exam page ↗Recommended after PortSwigger Web Security Academy and CYNARKS web labs.

AppSec

OffSec · OSWE (WEB-300 path)

Offensive Security Web Expert (OSWE)

Advancedactive

White-box web application security testing and source-code analysis.

Prerequisites: Strong AppSec + white-box coding skills
Exam format: Proctored practical white-box web assessment + report — verify current OffSec format
Cost: Verify with issuer
Validity: Does not expire (classic OSWE)
Renewal: Verify with issuer
Last verified: 2026-11-06

Recommended CYNARKS modules

Web Application Security Application Security / DevSecOps Programming & Scripting

Preparation labs / resources

Practice assessments

OffSec WEB-300 labs (separate)

Official exam page ↗Code-intensive advanced pathway, not a beginner certification.

Cloud

Amazon Web Services · SCS-C02

AWS Certified Security – Specialty

Advancedactive

AWS identity, infrastructure protection, logging, monitoring, and data security.

Prerequisites: AWS experience; Security+ or cloud security fundamentals helpful
Exam format: Multiple choice / multiple response
Cost: Verify with issuer
Validity: 3 years (AWS Certification)
Renewal: Recertify before expiry — verify on AWS
Last verified: 2026-11-06

Recommended CYNARKS modules

Cloud Security Application Security / DevSecOps

Preparation labs / resources

Practice assessments

AWS official practice (separate)

Official exam page ↗Vendor-specific. Practice using an appropriately secured AWS environment.

Microsoft · AZ-500

Microsoft Azure Security Engineer Associate

Advancedretired

Not recommended for new candidates — historical reference only.

Azure identity, network, compute, storage, and infrastructure security.

Prerequisites: Azure administration experience recommended
Exam format: Retired — historical Microsoft role-based exam
Cost: Verify with issuer
Validity: Exam retired 31 August 2026 — not available for new candidates
Renewal: Do not recommend for new candidates; see SC-500
Last verified: 2026-11-06

Recommended CYNARKS modules

Cloud Security

Preparation labs / resources

Practice assessments

Historical only — Microsoft practice assessments

Official exam page ↗Historical preparation track. Exam retired August 31, 2026. See SC-500 for the successor.

(ISC)² · CCSP

Certified Cloud Security Professional (CCSP)

Advancedactive

Cloud security architecture, governance, data protection, and operations.

Prerequisites: Cloud security experience; (ISC)² experience requirements apply for full certification
Exam format: Computer-based exam
Cost: Verify with issuer
Validity: Verify with issuer
Renewal: CPE + renewal — verify on (ISC)²
Last verified: 2026-11-06

Recommended CYNARKS modules

Cloud Security Security Architecture

Preparation labs / resources

/playbooks/cloud-assessment

Practice assessments

(ISC)² official practice (separate)

Official exam page ↗Broad cloud security credential. Check the issuer's experience requirements.

Cloud / AI Security

Microsoft · SC-500

Microsoft Certified: Cloud and AI Security Engineer Associate

Advancedactive

Cloud security controls, AI workload protection, and enterprise security implementation.

Prerequisites: Cloud security experience; Azure / hybrid / AI workload familiarity recommended
Exam format: Microsoft role-based exam — verify current format on Microsoft Learn
Cost: Verify with issuer
Validity: Verify with issuer
Renewal: Microsoft annual renewal assessment — verify on Microsoft Learn
Last verified: 2026-11-06

Recommended CYNARKS modules

Cloud Security AI & LLM Application Security Security Architecture

Preparation labs / resources

Practice assessments

Microsoft practice assessments

Official exam page ↗Successor pathway after AZ-500 retirement. Follow the current Microsoft exam guide (SC-500).

Blue / Network

GIAC / SANS · GCIA

GIAC Certified Intrusion Analyst (GCIA)

Advancedactive

Intrusion detection, network traffic analysis, and packet investigation.

Prerequisites: Strong networking + detection background
Exam format: Proctored multiple choice
Cost: Verify with issuer
Validity: 4-year renewal cycle (GIAC)
Renewal: GIAC renewal / CPE — verify
Last verified: 2026-11-06

Recommended CYNARKS modules

Networking Fundamentals Blue Teaming Security Operations / SOC

Preparation labs / resources

Practice assessments

GIAC practice tests (separate)

Official exam page ↗Advanced network detection and traffic analysis preparation.

DFIR

GIAC / SANS · GCFA

GIAC Certified Forensic Analyst (GCFA)

Advancedactive

Advanced digital forensic investigation and incident response.

Prerequisites: DFIR experience recommended
Exam format: Proctored multiple choice
Cost: Verify with issuer
Validity: 4-year renewal cycle (GIAC)
Renewal: GIAC renewal / CPE — verify
Last verified: 2026-11-06

Recommended CYNARKS modules

Digital Forensics Incident Response

Preparation labs / resources

Practice assessments

GIAC practice (separate)

Official exam page ↗Requires strong forensic investigation fundamentals.

Malware

GIAC / SANS · GREM

GIAC Reverse Engineering Malware (GREM)

Advancedactive

Malware reverse engineering, binary analysis, and behavioral investigation.

Prerequisites: Malware analysis / RE fundamentals
Exam format: Proctored multiple choice
Cost: Verify with issuer
Validity: 4-year renewal cycle (GIAC)
Renewal: GIAC renewal / CPE — verify
Last verified: 2026-11-06

Recommended CYNARKS modules

Malware Analysis Advanced Exploitation

Preparation labs / resources

/labs

Practice assessments

GIAC practice (separate)

Official exam page ↗Requires strong reverse engineering and malware analysis skills.

Leadership / Architecture

(ISC)² · CISSP

Certified Information Systems Security Professional (CISSP)

Expertactive

Enterprise security management, architecture, risk, and governance.

Prerequisites: (ISC)² experience requirements — exam pass alone is not full certification
Exam format: CAT / standardized exam per (ISC)² policy
Cost: Verify with issuer
Validity: Verify with issuer
Renewal: CPE + renewal — verify on (ISC)²
Last verified: 2026-11-06

Recommended CYNARKS modules

Security Architecture Advanced Cybersecurity / Professional Governance, Risk & Compliance

Preparation labs / resources

/roadmap

Practice assessments

(ISC)² official practice (separate)

Official exam page ↗Experience requirements apply. Not an entry-level certification.

Leadership

ISACA · CISM

Certified Information Security Manager (CISM)

Expertactive

Information security governance, risk management, and program leadership.

Prerequisites: ISACA experience requirements for full certification (distinct from exam eligibility)
Exam format: ISACA exam
Cost: Verify with issuer
Validity: Verify with issuer
Renewal: CPE cycle — verify on ISACA
Last verified: 2026-11-06

Recommended CYNARKS modules

Advanced Cybersecurity / Professional Security Architecture Governance, Risk & Compliance

Preparation labs / resources

Practice assessments

ISACA QAE (separate)

Official exam page ↗Management-oriented certification. Experience requirements apply.

GRC / Audit

ISACA · CISA

Certified Information Systems Auditor (CISA)

Intermediate–Advancedactive

Information systems auditing, controls, governance, and assurance.

Prerequisites: ISACA experience requirements for full certification (distinct from exam eligibility)
Exam format: ISACA exam
Cost: Verify with issuer
Validity: Verify with issuer
Renewal: CPE cycle — verify on ISACA
Last verified: 2026-11-06

Recommended CYNARKS modules

Security Fundamentals Governance, Risk & Compliance Advanced Cybersecurity / Professional

Preparation labs / resources

Practice assessments

ISACA QAE (separate)

Official exam page ↗Strong pathway for information systems audit and GRC careers. Exam pass ≠ full certification without experience.

GRC

ISACA · CRISC

Certified in Risk and Information Systems Control (CRISC)

Intermediate–Advancedactive

IT risk identification, assessment, response, and control monitoring.

Prerequisites: Risk/governance experience recommended; ISACA experience rules apply for full certification
Exam format: ISACA exam
Cost: Verify with issuer
Validity: Verify with issuer
Renewal: CPE cycle — verify on ISACA
Last verified: 2026-11-06

Recommended CYNARKS modules

Security Architecture Governance, Risk & Compliance Advanced Cybersecurity / Professional

Preparation labs / resources

Practice assessments

ISACA practice (separate)

Official exam page ↗Risk-focused credential. Review experience requirements.

Blue

Security Blue Team

Blue Team Level 1 (BTL1)

Beginner–Intermediateactive

Practical blue team investigation and defensive security operations.

Prerequisites: SOC fundamentals
Exam format: Practical blue-team exam
Cost: Verify with issuer
Validity: Verify with issuer
Renewal: Verify with issuer
Last verified: 2026-11-06

Recommended CYNARKS modules

Security Operations / SOC Blue Teaming Incident Response

Preparation labs / resources

Practice assessments

/quizzes

Official exam page ↗Good practical defensive security preparation.

Offense / Red

Zero-Point Security

Certified Red Team Operator (CRTO)

Advancedactive

Authorized adversary simulation and red team tradecraft.

Prerequisites: Solid pentest + AD fundamentals
Exam format: Practical red-team style assessment
Cost: Verify with issuer
Validity: Verify with issuer
Renewal: Verify with issuer
Last verified: 2026-11-06

Recommended CYNARKS modules

Red Teaming Active Directory & Windows Security Penetration Testing

Preparation labs / resources

/labs

Practice assessments

Course labs (separate)

Official exam page ↗Recommended after solid penetration testing and Active Directory fundamentals.

Identity

Microsoft · SC-300

Microsoft Identity and Access Administrator

Intermediateactive

Microsoft Entra identity, authentication, access management, and governance.

Prerequisites: Entra ID / Azure AD administration experience
Exam format: Microsoft role-based exam
Cost: Verify with issuer
Validity: Annual Microsoft renewal assessment
Renewal: Renew annually via Microsoft Learn assessment — verify
Last verified: 2026-11-06

Recommended CYNARKS modules

Active Directory & Windows Security Identity & Access Management Cloud Security

Preparation labs / resources

/labs

Practice assessments

Microsoft practice assessments

Official exam page ↗Relevant to IAM engineering and Microsoft identity administration.

OT / ICS

GIAC / SANS · GICSP

GIAC Global Industrial Cyber Security Professional (GICSP)

Intermediate–Advancedactive

Industrial control system security, operational technology, and critical infrastructure.

Prerequisites: OT/ICS familiarity; safety-first mindset
Exam format: Proctored multiple choice
Cost: Verify with issuer
Validity: 4-year renewal cycle (GIAC)
Renewal: GIAC renewal / CPE — verify
Last verified: 2026-11-06

Recommended CYNARKS modules

Networking Fundamentals System Security IoT, ICS & SCADA Security Security Architecture

Preparation labs / resources

Practice assessments

GIAC practice (separate)

Official exam page ↗OT/ICS preparation must prioritize operational safety and availability.

Privacy

IAPP · CIPP/E

Certified Information Privacy Professional / Europe (CIPP/E)

Intermediateactive

European privacy law, GDPR, and data protection programs.

Prerequisites: Privacy program interest; pick regional variant for your jurisdiction
Exam format: IAPP exam
Cost: Verify with issuer
Validity: Verify with issuer
Renewal: CPE cycle — verify on IAPP
Last verified: 2026-11-06

Recommended CYNARKS modules

Security Fundamentals Governance, Risk & Compliance Advanced Cybersecurity / Professional

Preparation labs / resources

Practice assessments

IAPP practice (separate)

Official exam page ↗Choose the privacy credential matching the jurisdiction where you intend to work.

Role maps: Career paths · Interview kits: /kits.