EXIN Cyber Security Foundation study materials
EXIN Cyber Security Foundation study resources

EXIN Cyber Security Foundation exam-day guide

EXIN Cyber Security Foundation · Prepare for the day ahead.

Your checklist

Government-issued photo ID

Bring the original, valid ID document (passport or national identity card) whose name exactly matches your exam registration. A photocopy or expired document is normally refused. Confirm with the provider which ID types are accepted for remote versus test-centre delivery.

Exam appointment confirmation and candidate number

Have the confirmation email and any candidate or registration number available. For a test centre, know the address, arrival time, and check-in desk; for remote proctoring, know the link and any session code.

Know the delivery format and platform

Confirm whether you sit the exam at a test centre or through online proctoring, and which platform (for example a browser-based or dedicated client) is used. Install or update any required software and run the system check before exam day. Confirm with the provider if the format is unclear.

Stable internet connection and working camera/microphone (remote exams)

Remote-proctored exams typically require a reliable connection, a webcam, a microphone and screen sharing. Test all of these at the same location and time of day as the real exam. If you are going to a test centre, this item does not apply.

Clear, quiet, well-lit room (remote exams)

The workspace should contain only permitted items: no notes, books, second screens, phones or other people. The proctor may ask for a 360-degree room scan. Remove clutter beforehand to avoid delays.

Review the official exam logistics and format

Check the current number of questions, time limit, pass mark and question style on the official EXIN certification page or your candidate handbook. These details can change, so confirm with the provider rather than relying on second-hand summaries.

Re-read your own summary sheet of key concepts

Use a one- or two-page personal summary of the syllabus areas (for example security concepts, threats and risks, controls, and incident response) rather than re-reading full course material. This is for the final review, not to be taken into the exam room unless the provider explicitly permits it.

Plan travel and arrival buffer (test centre)

Arrive with enough margin to complete ID checks and settle in. Traffic or check-in delays can cost exam time. Confirm with the provider how late arrival is handled; do not assume you will be admitted after the scheduled start.

Check provider rules on permitted items and breaks

Rules on water, medication, notes, calculators and breaks vary. Ask the provider in advance and, if you need an accommodation, request it well before exam day.

Backup plan for technical failure (remote exams)

Know the provider's support contact and what to do if the connection or platform fails mid-exam. Have a phone nearby only if the provider allows it for support purposes; otherwise keep it out of the room as instructed.

Sleep, food and hydration plan

A rested candidate reads scenario questions more accurately. Avoid a heavy meal immediately before the exam and plan a light snack for afterwards.

Confirm result and certificate process

Know how and when results are released and how the certificate or digital badge is issued. This is not needed during the exam but prevents confusion afterwards. Confirm with the provider if the process is not stated in your candidate materials.

Plan the day

72 hours before

Confirm all logistics: appointment time, test-centre address or remote session link, ID requirements and permitted items. Run the platform system check and, for remote delivery, test camera, microphone and connection in the room you will use. Resolve any technical issue now, not on exam day.

72 hours before

Do a final gap analysis against the official syllabus. List the two or three domains where your practice scores are weakest and spend the remaining study time there. Avoid starting new topics that are not on the syllabus.

72 hours before

Take one timed practice set under exam-like conditions to check pacing. Note how many questions you can answer per minute and decide a target pace for the real exam.

24 hours before

Light review only: read your summary sheet and any personal list of confused terms. Stop studying early enough to sleep well. Prepare your ID, confirmation and any permitted items in one place.

24 hours before

Re-check the provider's messages for last-minute changes to time, location or platform. Charge devices and, for remote exams, confirm the room will be free of other people at the scheduled time.

Morning of the exam

Eat a normal meal, avoid cramming new material, and arrive or log in early as instructed. Complete ID checks and room scans without rushing. Keep water only if the provider permits it.

During the exam: first pass

Read each question fully, including qualifiers such as 'best', 'first' or 'most likely'. Answer the straightforward questions first and flag longer scenario questions to revisit. Do not spend too long on any single item.

During the exam: second pass

Return to flagged questions. Eliminate clearly wrong options first, then choose the best remaining answer. For scenario questions, identify the asset, the threat and the control before selecting.

During the exam: final minutes

Check that every question has an answer, since unanswered questions usually score zero. Only change an answer if you have a clear reason; second-guessing without evidence often lowers scores.

After the exam

Note how results and certificates are delivered and keep your candidate number. If you did not pass, record which domains felt weakest while the memory is fresh, then confirm retake rules with the provider.

Rules to check

  • Bring valid government-issued photo ID whose name matches your registration exactly. Candidates without acceptable ID are normally not admitted; confirm accepted ID types with the provider before exam day.

  • Follow the provider's rules on permitted and prohibited items. In general, phones, smart watches, notes, books and unauthorised software are not allowed in the exam environment; if you are unsure about an item, ask the provider in advance.

  • For remote-proctored exams, stay within camera view, keep the room free of other people, and follow proctor instructions including any room scan. Do not communicate with anyone except the proctor during the exam.

  • Breaks are not guaranteed and rules differ by delivery format and any approved accommodation. Confirm with the provider whether scheduled or unscheduled breaks are allowed and how the timer is affected.

  • Scoring is based on the number of correctly answered questions against the pass mark set by the certification body. There is usually no penalty for guessing, so answer every question; confirm the current pass mark with the provider.

  • Do not attempt to copy, share or reconstruct exam questions. Such conduct can lead to invalidation of your result and a ban, and it undermines the value of the certification.

  • If a technical failure occurs during a remote exam, stop and contact provider support using the approved channel rather than improvising. Follow their instructions on resuming or rescheduling.

  • Report any concern about exam conditions to the provider promptly. Result appeals and retake policies are set by the certification body; confirm the exact process with the provider rather than assuming.