Alert:

This website is scheduled to undergo routine maintenance on Saturday, 20 July 5:00 p.m. CDT - Sunday, 21 July 2:00 a.m. CDT. During this time, you may not be able to schedule, reschedule or cancel test appointments. We apologize for this inconvenience and thank you for your patience.

CrowdStrike Falcon Certification Program

Updates to CrowdStrike Exams

To ensure exam content aligns to the way our candidates use the new Raptor release of the Falcon platform, we have updated the CrowdStrike Certified Falcon Responder (CCFR) and CrowdStrike Certified Falcon Administrator (CCFA) certification exams and recommended training courses.

The updated CCFR exam is now available to all candidates. The legacy version of the exam will be available to candidates through July 31, 2024. Review the CCFR exam guide to learn more about the exam.

Registration for the updated CCFA exam will open on June 24, 2024. The first date candidates can take the exam is July 22, 2024. If you have recently started using the Raptor release of Falcon or expect to begin using it soon, we recommend that you take the time to familiarize yourself with the enhanced features, complete the training courses in CrowdStrike University, and prepare to take the new version of the exam. Review the CCFA exam guide to learn more about the exam.

The CrowdStrike Certified Falcon Hunter (CCFH) exam is currently being updated and will also be available to candidates soon.

Questions? Review the information below and contact certification@crowdstrike.com for additional support. FAQs about CrowdStrike training and exams »

Questions about the updated exams and preparation

What is changing from the current (legacy) exams and the new exams?

  • The updated exams are comprised of questions that incorporate significant updates to the Falcon platform to reflect how candidates interact with the platform while performing in the job role of an incident responder or administrator.

What do I need to do to prepare for the new exam?

  • We strongly recommend completing the courses within CrowdStrike University as outlined in the exam guides. We also recommend that you have at least six months experience working in the Falcon platform.

Which exam should I take if I am new to CrowdStrike and the Falcon platform?

  • We recommend all candidates who have not yet earned a CrowdStrike credential complete the recommended learning and take the updated exams. This will ensure that your knowledge and skills are being measured against the most current version of the Falcon platform.

What should I do if I hold a current certification and need to recertify to maintain my credential?

  • We encourage all current credential holders to recertify by completing the new, updated version of the exams. Please reach out to certification@crowdstrike.com if you have specific questions about your credential status or recertification requirements.

When will the other CrowdStrike certification exams be updated to align with the Raptor updates?

  • The CrowdStrike Certified Hunter (CCFH) exam will be updated and is expected to be available to candidates by October 2024. The CrowdStrike Certified Identify Specialist (CCIS) and CrowdStrike Certified Cloud Specialist (CCCS) exams will be updated later in 2024.

EARN YOUR WINGS

CROWDSTRIKE CERTIFIED FALCON RESPONDER (CCFR)

The CCFR certification is directed at the front-line analyst responding to detections or anyone performing those duties.

VIEW EXAM GUIDE

CROWDSTRIKE CERTIFIEDFALCON RESPONDER (CCFR)

CROWDSTRIKE CERTIFIED FALCON HUNTER (CCFH)

The CCFH certification is directed at the investigative analyst who performs deeper detection analysis and response as well as machine timelining and event-related search queries, insider-threat-related investigations, and proactive investigations (threat hunting).

VIEW EXAM GUIDE

CROWDSTRIKE CERTIFIEDFALCON HUNTER (CCFH)

CROWDSTRIKE CERTIFIED FALCON ADMINISTRATOR (CCFA)

The CCFA certification is directed at the administrator or any analyst with access to the administrative side of the Falcon platform.

VIEW EXAM GUIDE

CCFA: CrowdStrike Certified Falcon Administrator

CROWDSTRIKE CERTIFIED IDENTITY SPECIALIST (CCIS)

The CCIS certification is directed at those working in identity and access management (IAM), analysts focusing on identity-based threats, and policy and access administrators.

VIEW EXAM GUIDE

CCIS: CrowdStrike Certified Identity Specialist

CROWDSTRIKE CERTIFIED CLOUD SPECIALIST (CCCS)

The CCCS certification is directed at the cloud security engineer who manages the security of the organization’s cloud infrastructure.

VIEW EXAM GUIDE

CCCS: CrowdStrike Certified Cloud Specialist
VIEW CERTIFICATION GUIDE

Take CSU Training Classes

Before getting CrowdStrike Certified, we recommend you take the learning path training courses listed in the Certification Exam Guides.

Preparing for the Certification Exam

Review the Exam Guides

The exam guide is the framework for the exam. The exam guide is valuable to the test taker because it breaks down the sections of the test. Please download and review the certification exam guides to prepare yourself before taking an exam.

Check Your System Requirements

OnVUE online proctoring allows you to take your certification exam securely from your home or office. Run a system check to test the compatibility of the OnVUE application.

Run a system check »

Scheduling the Exam

To participate in recommended training for CrowdStrike certifications, each learner must have a valid training subscription to CrowdStrike University and may need to purchase additional training credits. When you are ready to learn, simply login to CrowdStrike University and register for training. When you are ready to take your exam, schedule your exam here with Pearson VUE. During the exam scheduling process, you will have the option to pay for your exam by credit card or redeem an exam voucher. If you would like to purchase CrowdStrike University training subscriptions, training credits and exam vouchers by purchase order, simply click here to send an email with your request to a CrowdStrike training representative.

Accept the CSU Certification Agreement

Before you schedule your certification exam, please be sure to review the CrowdStrike University Certification Agreement here.

Choose Your Delivery Option

Earn your wings on your schedule! Our certification programs are delivered by PearsonVUE either online (OnVUE) or at a PearsonVUE Testing Center (PVTC), allowing you to avoid travel and additional costs.

Last updated 2024-06-06