Take My CCIS Exam

What the CCIS Exam Actually Tests

CCIS is the identity credential in CrowdStrike's role-based Falcon Certification Program, directed at people working in identity and access management (IAM) and analysts focusing on identity. The official exam guide describes a specialist who understands the tenets of identity protection and Zero Trust, enforces policies and policy rules against identity-based risks, and investigates identity-based detections and incidents inside the Falcon console.

The guide's successful-candidate profile is operational, not theoretical: configuring and maintaining the connectors between Falcon Identity Protection and MFA/IDaaS providers, assessing and managing user risk, implementing authentication and security best practices for network segments in the domain, performing proactive threat hunting on identity-based detections, and tuning detection settings and risk configurations for the domain. CrowdStrike recommends at least six months of Falcon experience in a production environment before sitting.

The guide's recommended reading list tells you where the questions live: Identity Protection Overview, Identity-based Incidents, Detections and Risks, Identity Protection Reports, System Notifications, Insights, Threat Hunters, Administration, Policy, and Identity Protection in Falcon Fusion Workflows.

One honesty note: CrowdStrike does not publish a numeric passing score. The exam guide says only that candidates must 'achieve a passing score.' Anyone who quotes you an exact CCIS pass percentage is guessing.

OnVUE at Home or a Pearson Testing Center

Pearson VUE's CrowdStrike program page states the delivery plainly: the certification programs are 'delivered by Pearson either online (OnVUE) or at a Pearson Testing Center (PVTC)'. Both routes are open for CCIS, and scheduling happens through your Pearson account with a credit card or an exam voucher.

The at-home route carries Pearson's published OnVUE requirements: Windows 10 or macOS 14 or higher, a working webcam, microphone, and speaker with no headphones, one display only, at least 6 Mbps down and 2 Mbps up, and the ability to close every application except OnVUE. Virtual machines, phones, tablets, smart devices with recording or AI features, secondary displays, VPNs, and corporate or public networks are prohibited. Pearson is explicit that failing the requirements on exam day can mean immediate cancellation and forfeiture of the exam fee - run the system test on the exact device and network you will use.

Both delivery routes are scheduled through Pearson VUE: the program page states the certification programs are 'delivered by Pearson either online (OnVUE) or at a Pearson Testing Center (PVTC)'. CrowdStrike's own guide adds the experience gate that shapes scheduling: six months of Falcon platform time is the recommended baseline for this identity specialist exam, so the sitting works best when Falcon Identity Protection is already daily territory rather than a cram subject.

What the CCIS Attempt Costs

The program guide is blunt about pricing: each CrowdStrike certification exam costs $250 USD. You buy the voucher through your CrowdStrike sales representative or online at Pearson, and every registrant must accept the CrowdStrike Certification Exam Agreement and be at least 18 years old - no exceptions.

Retakes cost the full $250 again, and the retake policy has teeth. After a failed first attempt you wait 48 hours. After the second, the wait is seven days for the third and later attempts. A fourth failure for performance reasons means a 30-day wait, retaking the recommended training, and a review with the CrowdStrike Certification Manager before a fifth attempt is even approved. Retakes beyond the fourth attempt are case-by-case, and CrowdStrike reserves the right to deny them. A failed exam is therefore not just a fee problem - it is a calendar problem, which is exactly what a handled sitting removes.

Where CCIS Candidates Actually Fail

• •[object Object]
• •[object Object]
• •[object Object]
• •[object Object]

How the Service Works

What You Get

Safety, Risk, and Straight Talk

CrowdStrike's exam guide is direct about misconduct: CrowdStrike may invalidate scores and treat suspicious action as a violation of the Certification Exam Agreement, and exam challenges must be filed within three days. Any provider who pretends those enforcement lines do not exist is not being honest with you.

What we control is the quality, discretion, and privacy of the engagement: an honest feasibility answer before anything starts, a structured execution plan, and a fee that follows the result. If your situation makes the service a bad fit, we tell you before you spend anything.

CrowdStrike's guides are equally direct about scoring integrity: the guides require candidates to 'achieve a passing score' and publish no numeric threshold, which means any prep provider quoting an exact CCIS pass percentage is inventing it. The scope the exam actually measures - identity protection and Zero Trust tenets, policy enforcement against identity-based risks, identity-detection investigation, MFA and IDaaS connector maintenance, user-risk management, and proactive threat hunting on identity detections - is published in the exam guide, and that published scope is what a legitimate engagement is planned against.

Candidate Feedback