CDME: Certified DDoS Mitigation Engineer
Demonstrate advanced expertise in DDoS mitigation engineering. Master BGP FlowSpec, scrubbing architectures, auto-mitigation, rate limiting algorithms, and compliance frameworks.
What You'll Be Tested On
The exam covers six advanced modules of DDoS mitigation engineering.
BGP FlowSpec & Routing
FlowSpec rule design, match criteria, BGP communities, RTBH vs FlowSpec trade-offs, and anycast architecture for DDoS defense.
Scrubbing Center Architecture
Clean-pipe return paths, GRE tunnel design, scrubbing center failover, traffic diversion via BGP, and capacity planning.
Auto-Mitigation Engineering
Automated escalation thresholds, runbook automation, iptables/nftables chains, conntrack tuning, and cloud WAF integration.
Rate Limiting & Traffic Shaping
Token bucket, leaky bucket, sliding window algorithms, traffic shaping vs policing, and NetFlow/sFlow sampling rate impacts.
Compliance & Reporting
PCI-DSS, SOC 2, and GDPR implications for DDoS mitigation logging. Post-incident reporting and audit trail requirements.
Multi-Layer Defense Design
Designing defense-in-depth architectures combining on-node, network-edge, and cloud scrubbing layers. Failover strategies and capacity planning for large-scale attacks.
Sign In Required
This is an advanced certification exam. Please sign in to your Flowtriq account or create a free account to begin.
Sign In Create Account