GFACT (GIAC Foundational Cybersecurity Technologies)
GFACT covers foundational cybersecurity concepts and the practical skills in computers, technology, and security needed to start a cybersecurity career. Topics include hardware and virtualization, networking, operating systems, web, cloud, data storage, logic and programming, Windows and Linux, exploitation and mitigation, and forensics. The audience includes people new to cybersecurity, career changers, college and university students, and new hires in IT or cybersecurity. For DoD 8140, GIAC pairs it with SANS SEC275.
Updated
Exam Details
- Issuer
- GIAC
- Level
- Entry
- Exam type
- Multiple choice
- Questions
- 75
- Duration
- 2 hours
- Passing score
- 71%
- Exam fee
- $399
- Validity
- 4 years
- Tracks
- Foundations
Open-book, web-based exam, proctored remotely through ProctorU or onsite at a Pearson VUE test center.
Price of one certification attempt with 120 days of access. A retake after a failed attempt is $199, a 45-day extension is $199, and a practice test is $189. Prices exclude sales tax.
Requirements and Renewal
Prerequisites
None. GIAC sets no prerequisites for any certification attempt but recommends a training course first.
Renewal
Earn 36 CPEs during the four-year cycle (or retake the exam) and pay the $199 renewal fee.
Exam Domains
9 domains| Domain |
|---|
| Computer Hardware & Virtualization |
| Exploitation & Mitigation |
| Forensics & Post-Exploitation |
| Linux Foundations |
| Logic & Programming |
| Networking & Servers |
| Operating Systems, The Web, & Data Storage |
| Security Concepts |
| Windows Foundations |
DoD 8140 Work Roles
9 work rolesThe DoD 8140 Qualification Matrix V2.1 lists GFACT as a foundational qualification option for these DoD Cyber Workforce Framework work roles, up to the proficiency level shown. Lower levels of the same work role are also covered.
Frequently Asked Questions
What does GFACT stand for?→
GFACT stands for GIAC Foundational Cybersecurity Technologies. GIAC itself was previously named Global Information Assurance Certification.
How much does GFACT cost?→
A GFACT certification attempt costs $399, and a retake after a failed attempt costs $199. Prices exclude sales tax.
How many questions are on the GFACT exam?→
The exam has 75 questions with a 2-hour limit. GIAC set the passing score at 71% for exam versions released on or after July 24, 2021.
What happens if you fail a GIAC exam?→
Candidates can buy a retake within 30 days after the attempt deadline and must wait 30 days before sitting again. After three failed attempts the attempt ends, and a new one cannot be bought for one year.
Sources
- GIAC: GIAC Foundational Cybersecurity Technologies (GFACT)
- GIAC Knowledge Base: Proctor Program Overview (open book guidelines)
- GIAC: How to Renew
- GIAC Certification Pricing and Fees
- GIAC Knowledge Base: Renewal
- GIAC Knowledge Base: Retakes and Extensions
- GIAC: DoD 8140 Directive
- GIAC Company Info
- GIAC Proctoring
- GIAC Blog: Applied Knowledge exams compared with Practitioner exams
Exam details are checked against official GIAC pages. Fees, exam versions, and renewal rules change; confirm with GIAC before registering. GFACT is a trademark of its owner. This site is not affiliated with or endorsed by GIAC.