CFR (CyberSec First Responder)
CertNexus's CyberSec First Responder is a vendor-neutral certification on threat detection, incident response, and defending information systems before, during, and after a cyber incident. The CFR-410 exam is organized into five domains (Identify, Protect, Detect, Respond, Recover), and the certification is ANAB-accredited under ISO/IEC 17024 and DoD 8140 approved.
Updated
Exam Details
- Issuer
- CertNexus
- Level
- Intermediate
- Exam code
- CFR-410
- Exam type
- Multiple choice
- Questions
- 80
- Duration
- 120 minutes, including 5 minutes for the candidate agreement and 5 minutes for the Pearson VUE tutorial
- Passing score
- 70% or 73%, depending on the exam form
- Exam fee
- $367.5
- Validity
- 3 years
- Tracks
- Forensics and Incident Response, Security Operations
Multiple-choice and multiple-response items, taken in person at a Pearson VUE test center or online through Pearson OnVUE. Every exam voucher includes one free retake, available immediately after a failed first attempt.
Price of a CFR-410 exam voucher in the CertNexus store. Vouchers include one free retake and expire 18 months from the date of purchase. Training is not required.
Requirements and Renewal
Prerequisites
None. CertNexus targets candidates with about three to five years of experience in a computing environment as part of a CERT, CSIRT, SOC, or cybersecurity team.
Renewal
Earn 90 continuing education credits within the three-year cycle through the CertNexus Continuing Education Program ($150 per cycle), or retake and pass the current version of the exam before expiry.
Current Version
CFR-410.
Exam Domains
5 domains| Domain | Weight |
|---|---|
| Identify | 22% |
| Protect | 24% |
| Detect | 18% |
| Respond | 19% |
| Recover | 17% |
DoD 8140 Work Roles
9 work rolesThe DoD 8140 Qualification Matrix V2.1 lists CFR as a foundational qualification option for these DoD Cyber Workforce Framework work roles, up to the proficiency level shown. Lower levels of the same work role are also covered.
Frequently Asked Questions
What does CFR stand for?→
CFR stands for CyberSec First Responder, a CertNexus certification. The current exam code is CFR-410, launched in March 2022.
How much does the CFR exam cost?→
A CFR-410 exam voucher costs $367.50 in the CertNexus store. Every CertNexus exam voucher includes one free retake.
How many questions are on the CFR exam?→
The CFR-410 exam has 80 multiple-choice and multiple-response items and a 120-minute time limit. The passing score is 70% or 73%, depending on the exam form.
How do I renew CFR?→
CertNexus certifications are valid for three years. Holders renew by earning 90 continuing education credits through the CertNexus Continuing Education Program, which costs $150 per three-year period, or by retaking and passing the current version of the exam before expiry.
Exam details are checked against official CertNexus pages. Fees, exam versions, and renewal rules change; confirm with CertNexus before registering. CFR is a trademark of its owner. This site is not affiliated with or endorsed by CertNexus.