Take My CCFP Exam

What the CCFP Exam Actually Tests

CCFP is the entry point into CrowdStrike's role-based certification program. The official exam guide says it validates foundational knowledge of core cybersecurity concepts and entry-level proficiency with the Falcon platform, focused on the security operations center. It is directed at entry-level SOC analysts and professionals new to Falcon, with three to six months of platform experience recommended.

The published scope has four domains: Cybersecurity Fundamentals, Falcon Platform Overview, Core Operational Workflows, and AI and Automation in Falcon. Behind those labels the objectives are specific: common threat types and basic MITRE ATT&CK concepts; key technologies like EDR, NGAV, XDR, and SIEM; Falcon's cloud-native architecture, core modules, and adoption phases; console navigation including universal search; the investigation workflow from detection to response; how CrowdStrike threat intelligence improves operational efficiency; and how Charlotte AI and AI-assisted capabilities accelerate analyst work.

One honesty note: CrowdStrike does not publish a numeric passing score for CCFP. The guide says only that candidates must 'achieve a passing score.' Anyone quoting an exact percentage is inventing it.

OnVUE at Home or a Pearson Testing Center

Pearson VUE's CrowdStrike program page states it plainly: the certification programs are 'delivered by Pearson either online (OnVUE) or at a Pearson Testing Center (PVTC)'. Both routes are open for CCFP, and scheduling runs through your Pearson account with a credit card or an exam voucher.

At home, Pearson's published OnVUE requirements apply: Windows 10 or macOS 14 or higher, a working webcam, microphone, and speaker with no headphones, one display only, at least 6 Mbps down and 2 Mbps up, and the ability to close every application except OnVUE. Virtual machines, phones, tablets, smart devices with recording or AI features, secondary displays, VPNs, and corporate or public networks are prohibited - and failing the requirements on exam day can mean immediate cancellation and forfeiture of the exam fee.

Both delivery routes are scheduled through Pearson VUE: the program page states the certification programs are 'delivered by Pearson either online (OnVUE) or at a Pearson Testing Center (PVTC)'. CrowdStrike's own guide adds the experience gate that shapes scheduling: three to six months of hands-on Falcon platform time is the recommended baseline for this practitioner exam, so the sitting works best when the console is already familiar territory rather than a cram subject.

What the CCFP Attempt Costs

Each CrowdStrike certification exam costs $250 USD, per the program guide - CCFP included, even though it is the entry-level credential. You buy the voucher through your CrowdStrike sales representative or online at Pearson, accept the CrowdStrike Certification Exam Agreement, and must be at least 18.

Retakes cost the full $250 again and carry mandatory waits: 48 hours after a failed first attempt, seven days for the third and later attempts, and after a fourth performance failure a 30-day wait, retaken recommended training, and a review with the CrowdStrike Certification Manager. For a credential aimed at people early in their careers, that failure bill stings - which is exactly why the fee-after-result model exists.

The retake ladder is where budgets go to die. A failed first attempt means a 48-hour wait and another full $250. Third and later attempts carry a seven-day wait each. Retakes beyond the fourth attempt are case-by-case, and a fourth performance failure triggers a 30-day wait plus retaken recommended training and a review with the CrowdStrike Certification Manager before a fifth attempt is even considered. One prepared sitting is cheaper than the cheapest 'guaranteed pass' coupon.

Where CCFP Candidates Actually Fail

• •[object Object]
• •[object Object]
• •[object Object]
• •[object Object]

How the Service Works

What You Get

Safety, Risk, and Straight Talk

CrowdStrike's exam guide is direct about misconduct: scores can be invalidated and suspicious action treated as a violation of the Certification Exam Agreement. Any provider who pretends those enforcement lines do not exist is not being honest with you.

What we control is the quality, discretion, and privacy of the engagement: an honest feasibility answer before anything starts, a structured execution plan, and a fee that follows the result. If your situation makes the service a bad fit, we tell you before you spend anything.

CrowdStrike's guides are equally direct about scoring integrity: the guides require candidates to 'achieve a passing score' and publish no numeric threshold, which means any prep provider quoting an exact CCFP pass percentage is inventing it. The scope the exam actually measures - four domains from Falcon platform overview and core operational workflows through detection response to the AI and Automation in Falcon domain that carries a full quarter of the blueprint - is published, and that published scope is what a legitimate engagement is planned against.

Candidate Feedback