CrowdStrike Falcon Certification Program

CCFR Exam Update - New Exam Launches June 3, 2024

To ensure exam content aligns to the way our candidates use the new Raptor release of the Falcon platform, we have updated the CCFR certification exam and recommended training courses. Candidates can register for the new exam beginning May 1, 2024. The first date candidates can take the exam is June 3, 2024.

If you are working in the legacy version of Falcon and want to take the current version of the exam, it will remain available through July 31, 2024. If you have recently started using the Raptor release of Falcon or expect to begin using it soon, we recommend that you take the time to familiarize yourself with the enhanced features and prepare to take the new version of the exam.

The CCFA exam is currently being updated and will also be available to candidates soon.

Questions? Review the information below and contact certification@crowdstrike.com for additional support.

FAQs about CrowdStrike training and exams can be found here.

Questions about the updated CCFR exam and preparation

What is changing from the current (legacy) exam and the new exam?

  • The updated exam is comprised of questions that incorporate significant updates to the Falcon platform to reflect how candidates interact with the platform while performing in the job role of an incident responder.

What do I need to do to prepare for the new exam?

  • We strongly recommend completing the courses within CrowdStrike University as outlined in the exam guide. We also recommend that you have at least six months experience working in the Falcon platform.

What happens if I fail the legacy exam?

  • The legacy exam will be available to retake through July 31, 2024. After that time, all candidates will need to successfully pass the new version of the exam.

Which exam should I take if I am new to CrowdStrike and the Falcon platform?

  • We recommend all candidates who have not yet earned the CrowdStrike Certified Falcon Responder credential complete the recommended learning and take the updated exam. This will ensure that your knowledge and skills are being measured against the most current version of the Falcon platform.

What should I do if I hold a current CCFR certification and need to recertify to maintain my credential?

  • We encourage all current CCFR credential holders to recertify by completing the new, updated version of the exam. Please reach out to certification@crowdstrike.com if you have specific questions about your credential status or recertification requirements.

When will the other CrowdStrike certification exams be updated to align with the Raptor updates?

  • The CrowdStrike Certified Falcon Administrator (CCFA) exam will be updated and available to candidates in July 2024. The CrowdStrike Certified Hunter (CCFH) exam will be updated and is expected to be available to candidates by September 2024. The CrowdStrike Certified Identify Specialist (CCIS) and CrowdStrike Certified Cloud Specialist (CCCS) exams will be updated later in 2024.

EARN YOUR WINGS

CROWDSTRIKE CERTIFIED FALCON RESPONDER (CCFR)

The CCFR certification is directed at the front-line analyst responding to detections or anyone performing those duties.

VIEW EXAM GUIDE

CROWDSTRIKE CERTIFIEDFALCON RESPONDER (CCFR)

CROWDSTRIKE CERTIFIED FALCON HUNTER (CCFH)

The CCFH certification is directed at the investigative analyst who performs deeper detection analysis and response as well as machine timelining and event-related search queries, insider-threat-related investigations, and proactive investigations (threat hunting).

VIEW EXAM GUIDE

CROWDSTRIKE CERTIFIEDFALCON HUNTER (CCFH)

CROWDSTRIKE CERTIFIED FALCON ADMINISTRATOR (CCFA)

The CCFA certification is directed at the administrator or any analyst with access to the administrative side of the Falcon platform.

VIEW EXAM GUIDE

CCFA: CrowdStrike Certified Falcon Administrator

CROWDSTRIKE CERTIFIED IDENTITY SPECIALIST (CCIS)

The CCIS certification is directed at those working in identity and access management (IAM), analysts focusing on identity-based threats, and policy and access administrators.

VIEW EXAM GUIDE

CCIS: CrowdStrike Certified Identity Specialist

CROWDSTRIKE CERTIFIED CLOUD SPECIALIST (CCCS)

The CCCS certification is directed at the cloud security engineer who manages the security of the organization’s cloud infrastructure.

VIEW EXAM GUIDE

CCCS: CrowdStrike Certified Cloud Specialist
VIEW CERTIFICATION GUIDE

Take CSU Training Classes

Before getting CrowdStrike Certified, we recommend you take the learning path training courses listed in the Certification Exam Guides.

Preparing for the Certification Exam

Review the Exam Guides

The exam guide is the framework for the exam. The exam guide is valuable to the test taker because it breaks down the sections of the test. Please download and review the certification exam guides to prepare yourself before taking an exam.

Check Your System Requirements

OnVUE online proctoring allows you to take your certification exam securely from your home or office. Run a system check to test the compatibility of the OnVUE application.

Run a system check »

Scheduling the Exam

To participate in recommended training for CrowdStrike certifications, each learner must have a valid training subscription to CrowdStrike University and may need to purchase additional training credits. When you are ready to learn, simply login to CrowdStrike University and register for training. When you are ready to take your exam, schedule your exam here with Pearson VUE. During the exam scheduling process, you will have the option to pay for your exam by credit card or redeem an exam voucher. If you would like to purchase CrowdStrike University training subscriptions, training credits and exam vouchers by purchase order, simply click here to send an email with your request to a CrowdStrike training representative.

Accept the CSU Certification Agreement

Before you schedule your certification exam, please be sure to review the CrowdStrike University Certification Agreement here.

Choose Your Delivery Option

Earn your wings on your schedule! Our certification programs are delivered by PearsonVUE either online (OnVUE) or at a PearsonVUE Testing Center (PVTC), allowing you to avoid travel and additional costs.

Last updated 2024-04-22