GFACT Passing Score 2026: Exactly What You Need to Pass

The Magic Number: 71 Percent

If you're preparing for GFACT and want a single number to anchor your study plan around, it's this: 71 percent. That's the minimum passing score GIAC has set for every version of the exam released on or after July 24, 2021. There's no sliding scale, no "curve," and no different passing bar for retakes versus first attempts. Whether you sit the exam through remote proctoring with ProctorU or onsite at a Pearson VUE test center, the standard is identical. The exam itself consists of 75 questions delivered in a single proctored sitting, with a 2-hour time limit. That works out to under two minutes per question on average, though GFACT questions vary in length - some are short conceptual checks, others require reading a short scenario or interpreting a command-line snippet before you can answer.

For a full breakdown of what GFACT is, how it fits into the GIAC catalog, and who it's designed for, see What Is GFACT? and GFACT Certification. This article focuses specifically on the scoring mechanics and what they mean for how you prepare.

Why 71 Percent and Not Some Other Score

GIAC doesn't pick passing scores arbitrarily. The 71 percent threshold for GFACT comes from a psychometric standard-setting study - a formal process where subject matter experts evaluate each exam question against the knowledge and skills expected of a minimally competent entry-level practitioner, then aggregate those judgments into a defensible cutoff. This is standard practice for ANAB-accredited, ISO/IEC 17024 personnel certification bodies, and GIAC's affiliation with the SANS Institute means the underlying content is built by practitioners actively teaching the material, not just committee-written trivia. Practically, this means the 71 percent isn't a round number chosen for simplicity - it reflects a calculated difficulty balance across all 9 domains. It also means you shouldn't assume older forum posts referencing a different cutoff apply to your exam. If your version was released after July 24, 2021, 71 percent is the number that matters.

How the 75 Questions Are Actually Scored

GFACT is a web-based exam, and while GIAC doesn't publish a public item-by-item scoring rubric, a few structural facts are confirmed and worth building your prep around:

• You get 75 questions total, all counted toward your final score.
• The 2-hour window is a hard limit - there's no extra time for reading comprehension unless you've arranged accommodations in advance.
• The exam is not CyberLive, meaning you won't be dropped into a live virtual machine to execute commands, even though the associated training (SANS SEC275) is built around hands-on labs in Linux, encryption, and programming.
• Questions test recognition and application of concepts - interpreting a Linux command's output, identifying which layer of the OSI model a problem belongs to, or recognizing a hardware component's function - rather than live technical execution.

This distinction matters for your prep strategy. Because the actual exam is knowledge-and-application based rather than lab-based, your study time should weight toward deeply understanding concepts across all 9 domains rather than over-rehearsing hands-on lab exercises. For a deeper dive into exactly how difficult this makes the exam relative to other entry-level certs, read How Hard Is the GFACT Exam? Complete Difficulty Guide 2026.

What 71 Percent Looks Like Across the 9 Domains

GIAC does not publish a required minimum score per domain - the 71 percent is an aggregate across the whole exam. But that doesn't mean domains are interchangeable in your prep. Some domains carry denser, more technical material that's easy to underestimate, while others are more conceptual and quicker to shore up. Here's how the 9 official domains typically demand different kinds of study effort:

For the full official objectives and outcome statements behind each of these, plus how much exam weight each area typically commands in practice, see GFACT Exam Domains 2026: Complete Guide to All 9 Content Areas.

Turning a Score Target Into a Study Schedule

Once you accept that 71 percent is an aggregate score across 9 domains rather than a per-domain hurdle, the smartest strategy is to identify your weakest 2-3 domains early and give them disproportionate time, while doing lighter maintenance review on domains you already know well from prior IT experience.

This is one reasonable pacing model, not the only one - if you're coming in with existing Linux or networking experience, compress those weeks and reallocate time to domains that are genuinely new to you. A more detailed, adjustable version of this approach is covered in GFACT Study Guide 2026: How to Pass on Your First Attempt.

Registration, Fees, and the Clock Once You Pay

Hitting 71 percent matters more when you understand what a failed attempt costs. A GFACT attempt runs $399, and if you don't pass, a retake is $199 - not a second full-price attempt. If you need more time before your window closes, an attempt extension is $199. These fees, alongside the $189 practice exam and $199 renewal cost, make GFACT one of the two cheapest certifications in the entire GIAC catalog, alongside GISF. Once your attempt activates, you have 120 days to complete the exam. Missing a scheduled proctored appointment triggers a $175 reseating fee plus only a 7-day extension - not a full reset - so treat your scheduled test date as fixed once it's booked. GIAC exams are proctored either remotely through ProctorU or onsite through Pearson VUE; there is no unproctored option.

GFACT has no prerequisites - it's explicitly built as an entry-level credential for career changers, students, new IT and cybersecurity hires, business professionals, self-driven learners, and re-skilling program participants. If you're unsure whether you qualify or need to check eligibility details, see GFACT Requirements 2026: Eligibility, Prerequisites & How to Qualify. And because GFACT maps to DoD 8140 directives and NIST NICE work roles, it's frequently used by employers and re-skilling programs as a verified entry point - more on which roles actually value it in GFACT Jobs.

What Happens If You Fall Short of 71 Percent

Falling short of the passing score doesn't disqualify you long-term - you simply pay the $199 retake fee and schedule another proctored sitting within your remaining window. But repeated retakes add up quickly given the $399 base cost of the original attempt, so it's worth being honest about readiness before you book your first date. Practice exams are a legitimate way to gauge readiness, but keep expectations calibrated: GIAC's official $189 practice exam and most third-party options draw from a limited question bank and never include actual exam questions. Use them to check pacing and domain coverage gaps, not to memorize specific answers. For context on how realistic pass expectations should be going in, see GFACT Pass Rate 2026: What the Data Shows.

If you're still deciding whether the investment is worth pursuing at all - factoring in the four-year certification validity, the 36 CPE renewal requirement, and career upside - Is the GFACT Certification Worth It? Complete ROI Analysis 2026 walks through the full cost-benefit picture, and GFACT Salary Guide 2026: Complete Earnings Analysis covers what the credential can do for compensation. Once you're ready to test your readiness against realistic questions, our practice test platform is built specifically around GFACT's 9 domains and the 71 percent scoring standard.

FAQ