78%

of organisations reported misconfigured infrastructure or services, the leading cause of exposure. Red Hat State of Cloud-Native Security 2026.

Red Hat Certified Specialist in Security: Linux (EX415) certification

Misconfiguration Opens the Door.

Misconfigured systems are the leading cause of exposure, reported by 78% of organisations. EX415 proves you can harden Red Hat Enterprise Linux and enforce compliance on live systems, in a four-hour hands-on exam.

HRD Corp claimableYayasan Peneraju: may be eligibleKL or online

Exam

EX415

Course

4 days

Course fee

RM6,520

With exam

RM8,534

Next intake

9 Feb 2027

Quick answer

What is Red Hat Certified Specialist in Security: Linux?

Red Hat Certified Specialist in Security: Linux shows you can secure Red Hat Enterprise Linux systems and enforce compliance with security policies. You prove it in EX415, a four-hour performance-based exam on live systems, covering SELinux, OpenSCAP, Linux Audit, AIDE, LUKS and NBDE encryption, USBGuard, PAM and Ansible automation. It also counts toward Red Hat Certified Architect (RHCA).

Exam facts verified against redhat.com on 25 Oct 2026

FOR

Linux system administrators, security and compliance practitioners, automation engineers

ROLES

Linux security engineer, system administrator, compliance engineer

SKIP IF

You do not have RHCE-level RHEL skills yet. Start with RHCSA, then RHCE

01

The Credential

What you study, practise and sit to earn it.

Pass EX415 and you hold Red Hat Certified Specialist in Security: Linux. Red Hat recommends RHCE (EX294) or equivalent Red Hat Enterprise Linux knowledge and experience before RH415. It is one of the Specialist electives toward RHCA.

COURSE

4 days, 12 modules

HANDS-ON

Live RHEL systems

EXAM

EX415, 4 hrs, performance-based

CREDENTIAL

Red Hat Certified Specialist

Awarded by

Red Hat

Level

Specialist, an RHCA elective

Recommended

RHCE (EX294) or equivalent RHEL experience

Exam

Hands-on tasks, no multiple choice

Validity

Current for 3 years

Course version

RHEL 9.2, Ansible Automation Platform 2.4

02

Decide in 60 Seconds

Four options people weigh against each other.

If you want to

Choose

Why

Harden and audit RHEL, proven hands-on

→

Red Hat EX415

Four-hour performance-based exam on live systems

Automate Linux administration with Ansible

→

Red Hat RHCE (EX294)

The step Red Hat recommends before RH415

Build broad security skills across platforms

→

CompTIA Security+

Vendor-neutral baseline security credential

Detect and respond to threats

→

CompTIA CySA+

Security analyst skills across tools and platforms

Built for experienced RHEL administrators. Are you ready?
0/4

Tick what applies. 3 or 4: you are ready for this course. Fewer: start with RHCSA and RHCE.

03

What the Exam Covers

EX415 exam objectives, grouped. All tasks are performed on live systems.

Performance-based, 4 hoursConfigurations must survive a reboot

Ansible

Automate

  • Configure managed nodes and inventories
  • Run provided playbooks against specified nodes
  • Restrict inventories, credentials and job templates in automation controller

Encryption and access

Protect Data and Devices

  • Encrypt block devices with LUKS and persistent storage with NBDE
  • Write USBGuard device policy rules
  • Configure PAM password quality and failed-login policies

Audit and integrity

Monitor and Detect

  • Install and configure AIDE for critical files
  • Write Linux Audit rules and produce reports
  • Enable prepackaged audit rules

SELinux and OpenSCAP

Enforce and Comply

  • Enable SELinux and fix violations
  • Restrict users with SELinux user mappings
  • Scan, tailor policies and generate remediation playbooks with OpenSCAP

Source: Red Hat EX415 exam objectives. Red Hat does not publish domain weightings.

04

What the Course Covers

Twelve modules, from risk strategy to automated compliance.

Four days on Red Hat’s official RH415 course, based on RHEL 9.2, Ansible Automation Platform 2.4, Satellite 6.14 and OpenSCAP 1.3.7. You secure systems by hand first, then automate it at scale.

Modules 1 to 2

Risk and Automation

  • Managing security and risk
  • Automating configuration and remediation with Ansible

Modules 3 to 5

Protecting Systems and Data

  • Protecting data with LUKS and NBDE
  • Restricting USB device access
  • Controlling authentication with PAM

Modules 6 to 8

Monitoring and Confinement

  • Recording system events with Audit
  • Monitoring file system changes with AIDE
  • Mitigating risk with SELinux

Modules 9 to 12

Compliance at Scale

  • Managing compliance with OpenSCAP
  • Analysing and remediating issues with Red Hat Insights
  • Automating compliance with Red Hat Satellite
  • Comprehensive review

12

modules of hands-on practice on Red Hat Enterprise Linux, using:

SELinuxOpenSCAPLinux AuditAIDEPAMLUKSNBDEUSBGuardRed Hat InsightsSatelliteAnsible

05

Why Now

How often systems get exposed, what it costs, and why train with us.

97%

of organisations reported at least one cloud-native security incident in the past year

Red Hat State of Cloud-Native Security 2026

74%

delayed or slowed application deployments because of security concerns

Red Hat State of Cloud-Native Security 2026

54%

rise in software supply chain attacks in 2025 compared with 2024

Red Hat Product Security Risk Report 2025

6 hrs

Six Hours to Report. Who’s Watching the Alerts?

Malaysia’s Cyber Security Act 2024 (Act 854) came into force on 26 August 2024. Critical infrastructure entities must report a cyber security incident within six hours, and managed SOC monitoring services now need a licence. Hardened, audited systems are how organisations show they meet duties like these.

NACSA; Cyber Security (Notification of Cyber Security Incident) Regulations 2024

Red Hat Business Partner, Training

Delivering Red Hat’s official RH415 course

Exam add-on

Add your EX415 exam for RM2,014

HRD Corp registered

This course is HRD Corp claimable

KL or online

Instructor-led in class or live online

06

The Cost, All In

Every figure per person, in ringgit.

Fees

Four-day courseRM6,520

Exam add-on (EX415)RM2,014

Funding

HRD Corp claim for employersClaimable

Yayasan Peneraju financing (Bumiputera)May be eligible

Course with exam

RM8,534

RM6,520 + RM2,014

Dates

Where

Fee

Tue 9 to Fri 12 Feb 2027

Kuala Lumpur or online

RM6,520 / RM8,534 with exam

Tue 11 to Fri 14 May 2027

Kuala Lumpur or online

RM6,520 / RM8,534 with exam

Tue 17 to Fri 20 Aug 2027

Kuala Lumpur or online

RM6,520 / RM8,534 with exam

Mon 22 to Thu 25 Nov 2027

Kuala Lumpur or online

RM6,520 / RM8,534 with exam

Training a team? We run private intakes on dates that suit your organisation, with HRD Corp claims handled alongside you.

07

Exam and Renewal

What exam day looks like, and what happens after you pass.

Certification

Red Hat Certified Specialist in Security: Linux

Exam

EX415

Format

Performance-based tasks on live systems

Duration

4 hours, one section

Results

Usually within 3 US business days

Retake

One retake if you do not pass the first attempt

Recommended

RHCE (EX294) or equivalent RHEL experience

Exam add-on

RM2,014 through Trainocate

EVERY 3 YEARS

Stay current

Red Hat certifications are current for three years. Keep a Specialist credential current by passing its exam again.

COUNTS TOWARD

Red Hat Certified Architect

EX415 is one of the three Specialist electives Red Hat requires for RHCA.

FAQ

Questions People Ask

What is Red Hat Certified Specialist in Security: Linux?

It is Red Hat’s credential for securing Red Hat Enterprise Linux systems and enforcing compliance with security policies, earned by passing the hands-on EX415 exam.

A four-hour, performance-based exam. You complete real security tasks across multiple live systems, and your configurations must survive a reboot. There are no multiple-choice questions.

At Trainocate Malaysia the four-day RH415 course is RM6,520 per person, or RM8,534 with the EX415 exam. The course is HRD Corp claimable, and Malaysian Bumiputera learners may be eligible for Yayasan Peneraju funding.

Red Hat recommends RHCE (EX294) or equivalent Red Hat Enterprise Linux knowledge and experience before RH415. The exam objectives include Ansible automation, which RHCE covers.

SELinux, OpenSCAP and OpenSCAP Workbench, Linux Audit, AIDE, LUKS and NBDE, USBGuard, PAM, and Ansible Automation Platform.

Yes. Red Hat Specialist certifications are electives for Red Hat Certified Architect, which needs one Administrator or Developer exam, one Engineer exam and three Specialist exams.

Red Hat certifications are current for three years. Pass EX415 again to keep this Specialist credential current.

Harden Linux. Prove It Live.

Pick an intake. An advisor confirms fees, HRD Corp claims and Yayasan Peneraju eligibility with you.

  • Next intake: 9 to 12 Feb 2027
  • RM6,520, or RM8,534 with exam

Sources

  1. Red Hat: Certified Specialist in Security: Linux
  2. Red Hat: EX415 exam objectives
  3. Red Hat: Certification renewal
  4. Red Hat: Major updates to Red Hat Certification (11 May 2026)
  5. Red Hat: The state of cloud-native security 2026 (blog, 23 Mar 2026)
  6. Red Hat: Product Security Risk Report 2025 (blog, 31 Jul 2026)
  7. Trainocate: RH415 course page
  8. NACSA: Cyber Security Act 2024 (Act 854)
  9. MAICSA: Act 854 regulations summary