The RHCSS (Red Hat Certified Security Specialist) is Red Hat’s stand alone security certification and is open to holders of a current RHCE. According to Red Hat, the RHCSS is aimed at “IT professionals whose job roles involve securing Red Hat Enterprise Linux systems and other parts of an organization's IT infrastructure”.
To earn the RHCSS credential, candidates must pass three exams:
- EX333 - Red Hat Enterprise Security: Network Services
- EX423 - Enterprise Directory Services and Authentication
- EX429 - SELinux Policy Administration
While successfully completing all three exams earns the RHCSS certification, each of the exams are a standalone credential in their own right so by themselves can be used to show proficiency in their respective areas of Linux security.
The RHCSS exams are all PBT’s (performance based tests) which means candidates are tested on a ‘live’ system. There are no multiple-choice, fill in the blank or drag-and-drop questions. Candidates can choose which order they wish to tackle the respective exams and results are sent out by e-mail up to 10 days after completing each exam. Unsuccessful candidates can take the test again as many times as needed (the exam fee is payable each time however).
RHCSS exams, being performance based, can only be booked through any authorized Red Hat facility, so check on Red Hat’s website for the location and hours of operation of your nearest facility.
Red Hat offers a training course for each of the three RHCSS exams. While these courses are not compulsory they do cover in-depth the material required to successfully pass the exam. Nevertheless, candidates may simply choose to self-study and take each exam when ready.
Even though the RHCSS is made up of three individual ‘Certificates of Expertise’ which themselves are valid indefinitely, the lifespan of a RHCSS is tied to the candidate’s RHCE – i.e. an individual's RHCSS certification is considered ‘current’ for as long as the individual's RHCE is current (through two releases). Once the individual's RHCE expires, so too does their RHCSS. If an individual renews their RHCE, then the RHCSS is ‘attached’ to the new RHCE and is considered valid again.
