To schedule, reschedule and cancel exam:
CrowdStrike Falcon Certification Program
What is changing from the current (legacy) exam and the new exam?
- The updated exam is comprised of questions that incorporate updates to the Falcon platform to reflect how candidates interact with the platform while performing in the job role of an incident hunter.
What do I need to do to prepare for the new exam?
- We strongly recommend completing the courses within CrowdStrike University as outlined in the exam guide. We also recommend that you have at least six months experience working in the Falcon platform.
What happens if I fail the legacy exam?
- The legacy exam will be available to retake through January 17, 2025. After that time, all candidates will need to successfully pass the new version of the exam.
Which exam should I take if I am new to CrowdStrike and the Falcon platform?
- We recommend all candidates who have not yet earned the CrowdStrike Certified Falcon Hunter credential complete the recommended learning and take the updated exam. This will ensure that your knowledge and skills are being measured against the most current version of the Falcon platform.
What should I do if I hold a current CCFH certification and need to recertify to maintain my credential?
- We encourage all current CCFH credential holders to recertify by completing the new, updated version of the exam. Please reach out to certification@crowdstrike.com if you have specific questions about your credential status or recertification requirements.
separator
EARN YOUR WINGS
CROWDSTRIKE CERTIFIED FALCON RESPONDER (CCFR)
The CCFR certification is directed at the front-line analyst responding to detections or anyone performing those duties.
CROWDSTRIKE CERTIFIED FALCON HUNTER (CCFH)
The CCFH certification is directed at the investigative analyst who performs deeper detection analysis and response as well as machine timelining and event-related search queries, insider-threat-related investigations, and proactive investigations (threat hunting).
CROWDSTRIKE CERTIFIED FALCON ADMINISTRATOR (CCFA)
The CCFA certification is directed at the administrator or any analyst with access to the administrative side of the Falcon platform.
CROWDSTRIKE CERTIFIED IDENTITY SPECIALIST (CCIS)
The CCIS certification is directed at those working in identity and access management (IAM), analysts focusing on identity-based threats, and policy and access administrators.
CROWDSTRIKE CERTIFIED CLOUD SPECIALIST (CCCS)
The CCCS certification is directed at the cloud security engineer who manages the security of the organization’s cloud infrastructure.
Take CSU Training Classes
Before getting CrowdStrike Certified, we recommend you take the learning path training courses listed in the Certification Exam Guides.
Preparing for the Certification Exam
Review the Exam Guides
The exam guide is the framework for the exam. The exam guide is valuable to the test taker because it breaks down the sections of the test. Please download and review the certification exam guides to prepare yourself before taking an exam.
Check Your System Requirements
OnVUE online proctoring allows you to take your certification exam securely from your home or office. Run a system check to test the compatibility of the OnVUE application.
Scheduling the Exam
To participate in recommended training for CrowdStrike certifications, each learner must have a valid training subscription to CrowdStrike University and may need to purchase additional training credits. When you are ready to learn, simply login to CrowdStrike University and register for training. When you are ready to take your exam, schedule your exam here with Pearson VUE. During the exam scheduling process, you will have the option to pay for your exam by credit card or redeem an exam voucher. If you would like to purchase CrowdStrike University training subscriptions, training credits and exam vouchers by purchase order, simply click here to send an email with your request to a CrowdStrike training representative.
Accept the CSU Certification Agreement
Before you schedule your certification exam, please be sure to review the CrowdStrike University Certification Agreement here.
Choose Your Delivery Option
Earn your wings on your schedule! Our certification programs are delivered by Pearson VUE either online (OnVUE) or at a Pearson VUE Testing Center (PVTC), allowing you to avoid travel and additional costs.
Contact us
Office hours
Monday–Friday, 7:00 a.m.–7:00 p.m. CT; closed on local holidays.
Telephone numbers
866-980-0413 (toll-free)
Last updated 2024-10-31