CrowdStrike

CrowdStrike's Falcon certification program is refreshingly uniform: every exam is 60 questions in 90 minutes, closed book, at $250, delivered through Pearson VUE as a test-center sitting or online via OnVUE. The lineup spans a foundational cert (CCFP-206, launched 2026) plus role exams including CCFA-200b for Falcon Administration, CCFH-202b for Threat Hunting, CCFR-201b for Falcon Responder, CCSA-205 for SIEM Analytics, CCSE-204 for Endpoint Security Engineering, and CCCS-203b for Cloud Security. Exam guides were revised through 2026 (CCSA in January, CCFA in February, CCFH in July), so prepare against current material.

Each exam maps to a console role. CCFA covers eight domains: user management, sensor deployment, host management and setup, group creation, policy application, rules configuration, dashboards and reports, and workflows. CCFH is the threat-hunting exam across seven domains: MITRE ATT&CK frameworks, detection analysis, search and investigation tools, event search, reports and references, hunting analytics, and hunting methodology. CCFR spans six domains ending in Real Time Response, and CCSA-205 is the four-domain SIEM analytics exam (querying and analytics, detection logic and alert analysis, incident investigation, reporting and communication), the one exam CrowdStrike explicitly describes as all multiple-choice.

CertCompanion carries 600-question practice banks for CCFA, CCSA-205, and CCFR plus 599 for CCFH, each starting with 30 free questions. No formal prerequisites exist, but CrowdStrike recommends six months of Falcon production experience, and candidates back that up: the recurring advice on r/crowdstrike is that you cannot pass without real console time, right down to knowing the name and content of every menu and sub-menu.

Plan the attempt carefully: certifications last 3 years (recertify by passing the current exam version), a first retake costs another $250 after a 48-hour wait, later retakes wait 7 days, and 4 attempts is the cap. CrowdStrike's older guide published an 80 percent pass threshold and candidates still report it (48 of 60), but it is no longer printed in the current exam guides, so prepare well above that line.