- GFACT costs $399, with a $189 practice exam and $199 retakes, extensions, or renewals.
- 75 questions, 2-hour limit, 71% passing score across 9 domains.
- Certification lasts 4 years; renewal needs 36 CPEs plus the renewal fee, or a retake.
- No prerequisites - GFACT is built for career changers and new IT/security hires.
Quick Facts Snapshot
Before you memorize a single domain, get the administrative facts locked in. GFACT is issued by GIAC, the SANS-affiliated, ANAB-accredited ISO/IEC 17024 body, and it's one of the two cheapest credentials in the entire GIAC catalog alongside GISF. That affordability, combined with zero prerequisites, is why it's become the default entry point for people moving into cybersecurity from other fields.
| Item | Detail |
|---|---|
| Issuing Body | GIAC (ANAB-accredited, ISO/IEC 17024) |
| Attempt Fee | $399 |
| Retake Fee | $199 |
| Attempt Extension | $199 |
| Renewal Fee | $199 |
| Practice Exam | $189 |
| Questions / Time | 75 questions / 2 hours |
| Passing Score | 71% |
| Validity Period | 4 years |
| Prerequisites | None |
For a deeper breakdown of every fee and what triggers it, see the full GFACT Certification Cost 2026: Complete Pricing Breakdown. If you're still unsure whether the eligibility rules apply to your background, the GFACT Requirements 2026: Eligibility, Prerequisites & How to Qualify guide covers it directly.
The Nine Domains at a Glance
GIAC publishes nine official Certification Objectives and Outcome Statements, and the exam draws its 75 questions from these nine domains. Treat this list as your master checklist - every study session should map back to one of them.
Domain 1: Computer Hardware & Virtualization
Covers how physical components, firmware, and hypervisors work together.
- CPU, memory, and storage fundamentals
- Virtualization concepts and hypervisor types
Domain 2: Exploitation & Mitigation
Focuses on how attacks happen and how defenders reduce risk.
- Common vulnerability classes and attack vectors
- Mitigation techniques and defensive controls
Domain 3: Forensics & Post-Exploitation
Tests knowledge of evidence handling and post-incident activity.
- Artifact and log analysis basics
- Chain-of-custody and investigative fundamentals
Domain 4: Linux Foundations
Requires comfort with the command line, not just theory.
- File permissions, processes, and shell commands
- Package management and basic scripting
Domain 5: Logic & Programming
Assesses whether you can read and reason about code.
- Control flow, loops, and variables
- Basic algorithmic thinking
Domain 6: Networking & Servers
Covers the plumbing that connects everything else.
- OSI/TCP-IP models and protocols
- Server roles and network services
Domain 7: Operating Systems, The Web, & Data Storage
Bridges OS internals with how the web and storage systems function.
- File systems and OS architecture
- Web protocols and database basics
Domain 8: Security Concepts
The connective tissue that ties every other domain together.
- CIA triad, risk, and access control models
- Core cryptography concepts
Domain 9: Windows Foundations
Mirrors Domain 4 but for the Windows ecosystem.
- Registry, services, and Active Directory basics
- Windows command-line and administration tools
For a walkthrough of how these nine areas interact and which topics deserve the most hours, read the GFACT Exam Domains 2026: Complete Guide to All 9 Content Areas.
Fees, Logistics & Scheduling
GFACT's exam is web-based and must be proctored - you choose between remote proctoring through ProctorU or onsite proctoring through Pearson VUE. Once your attempt activates, you have 120 days to sit the exam, so don't purchase the attempt until you're within a realistic study window.
The associated training course, SANS SEC275 Foundations, was authored by SANS CTO James Lyne and is built around hands-on labs in Linux, encryption, and programming. Note that while the course is lab-heavy, the certification exam itself is not CyberLive - you won't be manipulating a live environment during the test, only answering questions about concepts and command behavior.
If you want a granular explanation of how registration windows, extensions, and testing centers interact, the GFACT Exam Dates 2026: Testing Windows, Deadlines & Scheduling article walks through scheduling mechanics step by step.
Exam Format Cheat Sheet
Every GFACT attempt is a single proctored exam: 75 questions, a 2-hour time limit, and a required 71% to pass. There's no separate lab component and no essay questions - it's scenario-based multiple choice testing your ability to recognize correct concepts quickly under time pressure.
- 75 questions total across all nine domains
- 2-hour hard time limit - roughly 96 seconds per question on average
- 71% minimum passing score, unchanged since the July 24, 2021 standard-setting study
- No CyberLive component despite the labs emphasized in SEC275
Key Takeaway
Don't waste time on prerequisite worries or heavy math prep - GFACT rewards broad conceptual fluency across nine domains over deep specialization in any single one.
If you're weighing whether the format makes GFACT easy or brutal for a newcomer, the How Hard Is the GFACT Exam? Complete Difficulty Guide 2026 piece breaks down the difficulty qualitatively, and the GFACT Pass Rate 2026: What the Data Shows article covers what public data actually shows. For the exact scoring mechanics, see GFACT Passing Score 2026: Exactly What You Need to Pass.
Renewal & CPE Math
GFACT certification is valid for four years. To renew, you need 36 CPE credits accumulated within that active four-year window plus the renewal fee of $199 - or you can simply retake the current version of the exam instead.
- Work experience earns 1 CPE per month, capped at 12 CPEs per year
- Renewed certifications extend four years from the current expiration date, not from the renewal date
- GIAC lists no grace period after expiration - plan renewal activity well before your four-year mark
Who GFACT Is Actually For
GIAC explicitly positions GFACT as an entry-level credential for career changers, students, new IT and cybersecurity hires, business professionals, self-driven learners, and participants in re-skilling programs. There are no prerequisites - no required degree, no prior certification, no minimum years of experience.
GFACT also maps to DoD 8140 directives and NIST NICE work roles, which matters if you're targeting government, contractor, or regulated-industry positions where credential mapping affects hiring eligibility. That alignment is one reason employers list it in junior SOC analyst, IT support, and security operations postings.
Curious what roles actually value this credential and what employers pay for it? Check GFACT Jobs for role examples and GFACT Salary Guide 2026: Complete Earnings Analysis for a qualitative look at compensation trends. If you're still deciding whether the investment makes sense for your career stage, Is the GFACT Certification Worth It? Complete ROI Analysis 2026 lays out the tradeoffs.
Last-Week Review Plan
In the final week before your exam, resist the urge to start new material. Instead, rotate quickly through the nine domains in short blocks, prioritizing the ones you've scored weakest on in practice questions.
Networking & Servers + Security Concepts
- Redo protocol and OSI-layer flashcards
- Review CIA triad, access control, and crypto basics
Linux Foundations + Windows Foundations
- Drill command syntax you keep forgetting
- Compare parallel OS concepts side by side
Exploitation & Mitigation + Forensics & Post-Exploitation
- Review attack-to-defense mapping
- Skim log analysis and evidence-handling terms
Full Practice Run
- Take a timed 75-question set under 2-hour conditions
- Review every missed question by domain
This rotation only works if you've already built domain-level familiarity earlier in your prep - for the full multi-week plan, refer to the GFACT Study Guide 2026: How to Pass on Your First Attempt, which sequences all nine domains across a complete study calendar. Pair your review with realistic questions from our GFACT practice test platform so your final week is spent identifying gaps, not guessing at them.
Frequently Asked Questions
It's the GIAC Foundational Cybersecurity Technologies certification. For a full breakdown of the name and acronym history, see What Does GFACT Stand For? and GFACT Meaning.
No. GIAC lists no grace period after expiration, so you must accumulate 36 CPEs and pay the $199 renewal fee, or retake the current exam, before your four-year window closes.
No formal prerequisite exists. SEC275 Foundations, authored by James Lyne, is the associated SANS course and is lab-heavy, but you can self-study and register for the exam independently. See GFACT Training for options.
75 questions with a 2-hour time limit and a 71% minimum passing score, applicable to all exam versions released on or after July 24, 2021.
You'll incur a $175 reseating fee plus a 7-day extension to your 120-day attempt window, so reconfirm your ProctorU or Pearson VUE slot in advance.
For a broader introduction before diving into domain specifics, start with What Is GFACT? or the more detailed GFACT Certification overview, and keep this cheat sheet bookmarked as your one-page reference through exam day.