Overview
This document outlines which exams do not require a challenges folder as part of their certification process. Understanding these exceptions helps streamline the exam setup and administration process.

Exams That Require Challenges Folder
The following exams are administered with a challenges folder component. You need to download the necessary files such as .py, .yaml, and others, and place them into the respective challenge folder.
-
DevSecOps Professional Exam [CDP]
-
DevSecOps Expert Exam [CDE]
-
Container Security Expert Exam [CCSE]
-
Cloud Native Security Expert Course Exam [CCNSE]
Exams That Don’t Require Challenges Folder
The following exams are conducted without a challenges folder component. You should not include the .py file in the zip, even if it’s the file you edited. The exam rules prohibit any executable‑type artifacts (executables, shell scripts, .py files). Only submit the non‑executable files you added or changed, and embed the relevant Python code as a snippet or screenshot inside your report.
-
Threat Modeling Exam [CTMP]
-
Software Supply Chain Security Expert Exam [CSSE]
-
AI Security Professional Exam [CAISP]
-
API Security Professional Exam [CASP]
-
Security Champion Exam [CSC]
Note: For these certification exams, only a PDF or markdown format inside the zip file is required. You do not need to create a challenges folder.