ISC Certification

In 2012, DNScoacting in conjunction with our training partner Men & Mice, announced our DNS/BIND, DHCP, IPv6 and DNSSEC Certification program.

These certifications are based primarily on the protocols and also from training material presented in the DNSco training curriculum.

Please note that the certification also tests operational experience. If you have never operated a DNS Server, DHCP server, or IPv6 network, attending the training might not give you enough information to successfully complete and pass the certification.

ISC and Men & Mice currently provide the certification testing online, two times per month.

For Training course information and sign-ups please visit DNSco Training

Benefits of ISC Certifcation

  • Increase job performance
  • Career advancement in the DNS/DHCP industry
  • Reliable source to represent experience and knowledge
  • Based on practical and industry experience
  • Assurance to organizations seeking experienced professionals

Training and Testing Information

Testing is provided by ISC or Men & Mice via online-dates are below; seating is limited.

Reserve a testing date today by sending an email to certification@isc.org

Online Certifications test dates are scheduled for:

US Hours:

European Hours:

  • Available upon request

More Questions? Please see our Certification FAQ section in our KnowledgeBase.

Certification Levels

DNS/CA - Certified DNS/BIND Associate - $275.00

Materials Covered

  • A brief Internet history
  • DNS – Goals and Principles
  • Name Servers – General Operation
  • Resolver (Client) Configuration
  • Overview of BIND – The Application
  • Building BIND – Source Code to Binary
  • BIND Daemon Configuration
  • Utilities – dig, checkconf, checkzone, rndc
  • Resource Records and Record Types
  • Delegation of Zones
  • Debugging Domain Name Service issues

Exam takers are expected to have experience in the following items:

  • Resolver Configuration
  • Building BIND
  • Configuring BIND
  • Creating Zones
  • Zone Delegation

DNS/CP - Certified DNS/BIND Professional - $585.00

Materials Covered

  • A brief Internet history
  • DNS – Goals and Principles
  • Name Servers – General Operation
  • Resolver (Client) Configuration
  • Overview of BIND – The Application
  • Building BIND – Source Code to Binary
  • BIND Daemon Configuration
  • Utilities – dig, checkconf, checkzone, rndc
  • Resource Records and Record Types
  • Delegation of Zones
  • Debugging Domain Name Service issues
  • Overview of RFC 1918 (private addressing) in DNS
  • Cryptography in DNS
  • Transaction Signatures
  • Dynamic DNS Updates
  • Remote control access using TSIG
  • Administrator Defined Resource Records
  • Multiple Views
  • ENUM and the NAPTR record
  • Interaction between DNS and Firewalls
  • DNS Security (DNSSEC)
    • The DNSSEC resource records
    • chain of trust
    • configuration of a validating DNS resolver
    • signing zones
    • NSEC and NSEC3
    • DNSSEC maintenance tasks (resigning and key-rollover)
    • debugging DNSSEC with ‘dig’ and ‘date’
    • DNSSEC debugging tools
  • DLV (Domain Look-aside Validation) – DNSSEC when the parent isn’t signed

Exam takers are expected to have experience in the following items:

  • Resolver Configuration
  • Building BIND
  • Configuring BIND
  • Creating Zones
  • Zone Delegation
  • TSIG – Server to Server
  • Dynamic Updates
  • DNSSEC Deployment
  • DLV Implementation

DNS/CDE - Certified DNSSEC Expert - $350.00

Materials Covered

  • DNS Fundamentals
  • DNSSEC Theory and History
  • DNS Threats
  • DNSSEC Introduction
  • DNSSEC Infrastructure Requirements
  • Signing tools
  • DNSSEC Deployment
  • DNSSEC with BIND 9.7+
  • DNSSEC Validation
  • A validating caching only configuration for BIND 9
  • Signing zones with NSEC3
  • DNSSEC Key rollover
  • DNSSEC tools and troubleshooting
  • DNSSEC in BIND 9.8 and 9.9
  • Hardware Security Modules (HSM)

Exam takers are expected to have experience in the following items:

  • Extensive knowledge in utilizing BIND modules
  • DNSSEC zone signing
  • Implementing DNSSEC with BIND 9.7+
  • Conduct DNSSEC validation with BIND
  • ZSK and KSK rollover
  • BIND with SoftHSM

IPv6/CA - Certified IPv6 Associate - $295.00

Materials Covered

  • IPv6 Fundamentals
  • IPv6 tools
  • IPv6  and DNS
  • DHCPv6 protocol
  • IPv6 Privacy Extensions
  • IPv6 Routing and Tunnel
  • IPv6 Address Planning
  • IPv6 security
  • DNS Server and IPv6
  • NAT64 and DS-Lite
  • IPv6 and Web Services
  • IPv6 and E-Mail
  • IPv6 and network time protocol
  • IPv6 Multicast beyond the link level scope

Exam takers are expected to have experience in the following items:

  • Extensive knowledge in utilizing DHCP modules
  • Implementing IPv6 in a network
  • Bug testing and security testing of IPv6