What is the format of the CyberSec First Responder exam?
Per the official CertNexus exam details, the CFR exam is 80 items in multiple-choice and multiple-response formats, answered in 120 minutes — and that time includes 5 minutes for the Candidate Agreement and 5 minutes for the Pearson VUE tutorial, leaving roughly 110 working minutes. The passing score is 70% or 73% depending on the exam form, and forms have been statistically equated. Delivery is in person at a Pearson VUE test center or online via Pearson OnVUE online proctoring, and the exam voucher costs $367.50 at the CertNexus store.
What does the CFR exam cover?
CyberSec First Responder is CertNexus's credential for the people who work incidents: identifying, assessing, responding to, and protecting against cybersecurity threats. The exam is DoD 8140 approved and ANAB-accredited under ISO/IEC 17024, launched in its current CFR-410 form in March 2022.
The published target candidate is a cybersecurity professional with roughly three to five years of experience on a CERT, CSIRT, SOC, or cybersecurity team responsible for protecting critical systems before, during, and after an incident. That is an experience profile, not a prerequisite chain — no prior certification is required to sit.
In practice the paper grades response workflow: threat classification, evidence handling, containment choices, and recovery sequencing. Multiple-response items require every correct option, with no partial credit published — sequence errors and half-remembered playbooks are what sink attempts.
How much does the CFR exam cost?
The CFR-410 exam voucher is $367.50 on the CertNexus store. Vouchers are non-refundable, non-transferable, and non-exchangeable, and expire 18 months from purchase — buy against a real testing window, not a vague intention.
Certification runs on a three-year term. To maintain it you either retake the most recent exam version before expiry or earn 90 continuing-education credits (CECs) within the three years — CFR is currently eligible for the CEC route, and the continuing-education enrollment is a $150 one-time payment for the full period. There is no published free retake, so a failed first attempt means a second voucher at full price.
Can you take the CFR exam at home?
Yes — the official exam details list two options: in person at a Pearson VUE test center, or online via Pearson OnVUE online proctoring. CertNexus appears on Pearson VUE's OnVUE program catalog, and the store voucher page names PearsonVUE/OnVUE as the delivery mode.
OnVUE means your environment is part of the exam: a private room, a working webcam and microphone, government ID that passes automated verification, and a check-in sequence that photographs your workspace. Vouchers are redeemed against your Pearson VUE scheduling.
For candidates on a DoD 8140-aligned role deadline, the practical decision is which delivery mode has the sooner reliable appointment in your region — then rehearsing the check-in until it is routine. If the exam itself is the blocker rather than the studying, Exam Assist handles the CFR sitting end to end, and the service fee is due only after the agreed result posts.
Who is the CFR for — and who should wait?
CFR fits SOC analysts, incident responders, and security-operations staff who need a DoD 8140-approved, ANAB-accredited credential for a role, contract, or clearance-adjacent requirement. There are no formal prerequisites; the published target is the three-to-five-year experience profile.
Wait if your timeline has no room for environment preparation — the OnVUE checklist is unforgiving at zero hour, and a voucher burned on a failed check-in is gone. If the sitting itself is the blocker, the take-my-CFR service handles it end to end with the fee due only after the pass posts.