Take My CCFA Exam

What the CCFA Exam Actually Tests

CCFA is the administrative credential in CrowdStrike's role-based Falcon Certification Program. The official exam guide says it evaluates your ability to perform administrative and vulnerability-management tasks inside the Falcon platform: user management and role-based permissions, deploying and managing Falcon sensors and creating groups, configuring deployment and prevention policy settings, allowlists and blocklists, file-path exclusions, and administrative reporting.

The published exam scope has eight topic areas: User Management, Sensor Deployment, Host Management and Setup, Group Creation, Policy Application, Rule Configuration, Dashboards and Reports, and Workflows. CrowdStrike recommends at least six months of hands-on Falcon experience before sitting, because the questions measure knowledge gained through doing the work, not reading about it.

One honesty note: CrowdStrike does not publish a numeric passing score. The exam guide says only that candidates must 'achieve a passing score.' Anyone who quotes you an exact CCFA pass percentage is guessing.

OnVUE at Home or a Pearson Testing Center

Pearson VUE's CrowdStrike program page states the delivery plainly: the certification programs are 'delivered by Pearson either online (OnVUE) or at a Pearson Testing Center (PVTC)'. Both routes are open for CCFA, and scheduling happens through your Pearson account with a credit card or an exam voucher.

The at-home route carries Pearson's published OnVUE requirements: Windows 10 or macOS 14 or higher, a working webcam, microphone, and speaker with no headphones, one display only, at least 6 Mbps down and 2 Mbps up, and the ability to close every application except OnVUE. Virtual machines, phones, tablets, smart devices with recording or AI features, secondary displays, VPNs, and corporate or public networks are prohibited. Pearson is explicit that failing the requirements on exam day can mean immediate cancellation and forfeiture of the exam fee - run the system test on the exact device and network you will use.

Both delivery routes are scheduled through Pearson VUE: the program page states the certification programs are 'delivered by Pearson either online (OnVUE) or at a Pearson testing center'. CrowdStrike's own guide adds the experience gate that shapes scheduling: at least six months of hands-on Falcon experience is the recommended baseline for this administrator exam, because the questions measure knowledge gained through doing the work, not reading about it.

What the CCFA Attempt Costs

The program guide is blunt about pricing: each CrowdStrike certification exam costs $250 USD. You buy the voucher through your CrowdStrike sales representative or online at Pearson, and every registrant must accept the CrowdStrike Certification Exam Agreement and be at least 18 years old - no exceptions.

Retakes cost the full $250 again, and the retake policy has teeth. After a failed first attempt you wait 48 hours. After the second, the wait is seven days for the third and later attempts. A fourth failure for performance reasons means a 30-day wait, retaking the recommended training, and a review with the CrowdStrike Certification Manager before a fifth attempt is even approved. Retakes beyond the fourth attempt are case-by-case, and CrowdStrike reserves the right to deny them. A failed exam is therefore not just a fee problem - it is a calendar problem, which is exactly what a handled sitting removes.

The retake ladder is where budgets go to die. A failed first attempt means a 48-hour wait and another full $250. Third and later attempts carry a seven-day wait each. Retakes beyond the fourth attempt are case-by-case, and a fourth performance failure triggers a 30-day wait plus retaken recommended training and a review with the CrowdStrike Certification Manager before a fifth attempt is even considered. One prepared sitting is cheaper than the cheapest 'guaranteed pass' coupon.

Where CCFA Candidates Actually Fail

• •[object Object]
• •[object Object]
• •[object Object]
• •[object Object]

How the Service Works

What You Get

Safety, Risk, and Straight Talk

CrowdStrike's exam guide is direct about misconduct: CrowdStrike may invalidate scores and treat suspicious action as a violation of the Certification Exam Agreement, and exam challenges must be filed within three days. Any provider who pretends those enforcement lines do not exist is not being honest with you.

What we control is the quality, discretion, and privacy of the engagement: an honest feasibility answer before anything starts, a structured execution plan, and a fee that follows the result. If your situation makes the service a bad fit, we tell you before you spend anything.

CrowdStrike's guides are equally direct about scoring integrity: the guides require candidates to 'achieve a passing score' and publish no numeric threshold, which means any prep provider quoting an exact CCFA pass percentage is inventing it. The scope the exam actually measures - administrative and vulnerability-management tasks inside the Falcon platform, from user management and sensor deployment through policy application, rule configuration, dashboards, and workflows - is published in eight areas, and that published scope is what a legitimate engagement is planned against.

Candidate Feedback