CrowdStrike Falcon Certification Program

Updates to CrowdStrike Exam

To ensure exam content is current and aligns to the way our candidates use the Falcon platform, we have updated the CrowdStrike Certified Falcon Administrator (CCFA) and CrowdStrike Certified Falcon Responder (CCFR) certification exams and recommended training courses.  

The updated CCFA and CCFR exams are now available to all candidates. If you have recently started using the Raptor release of Falcon, we recommend that you take time to familiarize yourself with the enhanced features, complete the training courses in CrowdStrike University, and prepare to take the updated version of the exam(s). 

Review the exam guides for additional information, including a detailed list of topics and knowledge areas you can expect to see on the exam:

The CrowdStrike Certified Falcon Hunter (CCFH) exam is currently being updated and will also be available to candidates soon.

Questions? Review the information below and contact certification@crowdstrike.com for additional support. FAQs about CrowdStrike training and exams »

What is changing from the previous exams and the new exams?

  • The updated exams are comprised of questions that incorporate significant updates to the Falcon platform to reflect how candidates interact with the platform while performing in the job role of an administrator or incident responder.

What do I need to do to prepare for the new exam?

  • We strongly recommend completing the courses within CrowdStrike University as outlined in the exam guides. We also recommend that you have at least six months experience working in the Falcon platform.

Which exam should I take if I am new to CrowdStrike and the Falcon platform?

  • We recommend all candidates who have not yet earned a CrowdStrike credential complete the recommended learning and take the updated exams. This will ensure that your knowledge and skills are being measured against the most current version of the Falcon platform. 

When will the other CrowdStrike certification exams be updated to align with the Raptor updates?

  • The CrowdStrike Certified Hunter (CCFH) exam will be updated and is expected to be available to candidates by November 2024. The CrowdStrike Certified Identify Specialist (CCIS) and CrowdStrike Certified Cloud Specialist (CCCS) exams will be updated later in 2024. 

separator

EARN YOUR WINGS

CROWDSTRIKE CERTIFIED FALCON RESPONDER (CCFR)

The CCFR certification is directed at the front-line analyst responding to detections or anyone performing those duties.

VIEW EXAM GUIDE

CROWDSTRIKE CERTIFIED FALCON HUNTER (CCFH)

The CCFH certification is directed at the investigative analyst who performs deeper detection analysis and response as well as machine timelining and event-related search queries, insider-threat-related investigations, and proactive investigations (threat hunting).

VIEW EXAM GUIDE

CROWDSTRIKE CERTIFIED FALCON ADMINISTRATOR (CCFA)

The CCFA certification is directed at the administrator or any analyst with access to the administrative side of the Falcon platform.

VIEW EXAM GUIDE

CCFA: CrowdStrike Certified Falcon Administrator

CROWDSTRIKE CERTIFIED IDENTITY SPECIALIST (CCIS)

The CCIS certification is directed at those working in identity and access management (IAM), analysts focusing on identity-based threats, and policy and access administrators.

VIEW EXAM GUIDE

CCIS: CrowdStrike Certified Identity Specialist

CROWDSTRIKE CERTIFIED CLOUD SPECIALIST (CCCS)

The CCCS certification is directed at the cloud security engineer who manages the security of the organization’s cloud infrastructure.

VIEW EXAM GUIDE

CCCS: CrowdStrike Certified Cloud Specialist

Take CSU Training Classes

Before getting CrowdStrike Certified, we recommend you take the learning path training courses listed in the Certification Exam Guides.

Preparing for the Certification Exam

Review the Exam Guides

The exam guide is the framework for the exam. The exam guide is valuable to the test taker because it breaks down the sections of the test. Please download and review the certification exam guides to prepare yourself before taking an exam.

Check Your System Requirements

OnVUE online proctoring allows you to take your certification exam securely from your home or office. Run a system check to test the compatibility of the OnVUE application.

Run a system check »

Scheduling the Exam

To participate in recommended training for CrowdStrike certifications, each learner must have a valid training subscription to CrowdStrike University and may need to purchase additional training credits. When you are ready to learn, simply login to CrowdStrike University and register for training. When you are ready to take your exam, schedule your exam here with Pearson VUE. During the exam scheduling process, you will have the option to pay for your exam by credit card or redeem an exam voucher. If you would like to purchase CrowdStrike University training subscriptions, training credits and exam vouchers by purchase order, simply click here to send an email with your request to a CrowdStrike training representative.

Accept the CSU Certification Agreement

Before you schedule your certification exam, please be sure to review the CrowdStrike University Certification Agreement here.

Choose Your Delivery Option

Earn your wings on your schedule! Our certification programs are delivered by Pearson VUE either online (OnVUE) or at a Pearson VUE Testing Center (PVTC), allowing you to avoid travel and additional costs.

Contact us

Office hours

Monday–Friday, 7:00 a.m.–7:00 p.m. CT; closed on local holidays.

Telephone numbers

866-980-0413 (toll-free)

Last updated 2024-10-02