HTB CJCA
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The HTB CJCA (Certified Junior Cybersecurity Analyst) is an entry-level credential offered by Hack The Box that validates the foundational knowledge expected of someone stepping into a first security role - SOC analyst, junior blue-teamer, or IT generalist with security responsibilities. It is aimed at candidates with little or no professional experience who want a structured, verifiable signal of baseline competence rather than a deep specialist certification. The exam is delivered in a multiple-choice and scenario-based format, so it tests both recall of core concepts and the ability to reason about a short situation and pick the defensible answer. Coverage spans the building blocks of the field: security principles and terminology, networking fundamentals, operating system and endpoint hardening, identity and authentication, common threats and vulnerabilities, security operations and incident response, log analysis and detection, and the governance, risk, and compliance basics that shape real decisions. Preparation works best as a layered pass: build vocabulary and mental models first, then practise reading logs, tickets, and short incident narratives and explaining what you would do next and why. Hands-on familiarity with Linux and Windows command-line tools, packet flow, and authentication mechanisms makes the scenario questions far easier. Because this is an independent study resource, we are not affiliated with or endorsed by Hack The Box; always confirm current exam logistics on the official site.
What you'll study
About HTB CJCA preparation
What is the exam format?
Expect a computer-delivered exam mixing multiple-choice items with scenario-based questions that present a short situation and ask for the best action or interpretation. Some items test definitions; others test judgement. Read each scenario fully before answering, because a single word such as 'first' or 'least' changes which option is correct.
How long is the exam and how many questions are there?
Those figures are set by Hack The Box and can change between exam versions, so the official site is the only reliable place to check the current question count and time limit. Plan your pacing around whatever is published: flag uncertain items, keep moving, and return to them rather than losing minutes on one question.
How much does it cost and what is the passing score?
Pricing and the passing threshold are published by the certification body and are not fixed values we can quote. Check the official Hack The Box certification page for the current fee, any bundle options, and the score required to pass. Budget for a retake as well if the policy allows one.
How difficult is the CJCA?
It is designed as a junior-level credential, so difficulty comes from breadth rather than depth. Candidates with a few months of structured study and some hands-on lab time usually find the concepts manageable. The common stumbling block is scenario questions that require connecting two domains, such as an authentication event that shows up in a log.
Can I retake the exam if I fail?
Retake rules, waiting periods, and any associated fees are defined by Hack The Box and may be revised. Confirm the current policy on the official site before you book. Practically, treat a failed attempt as diagnostic: note which domains the score report flags as weak and rebuild those areas before rescheduling.
What study order do you recommend?
Start with security fundamentals and networking, since nearly every later topic depends on them. Then cover operating system and endpoint security and identity and authentication. Move to threats and vulnerabilities, then security operations and log analysis, which reward the earlier groundwork. Finish with governance, risk, and compliance, which is largely vocabulary and framework recall.
Do I need hands-on experience or just theory?
Both help, but hands-on practice is what makes scenario questions feel familiar. Reading logs, tracing a TCP handshake, inspecting authentication events, and working in a Linux shell turn abstract definitions into recognisable patterns. Free labs and your own virtual machines are enough; you do not need an enterprise environment.
Why do candidates fail scenario questions?
Usually because they answer from general instinct instead of the evidence in the prompt. The best answer is the one the scenario supports, not the most sophisticated-sounding option. Watch for qualifiers like 'first step', 'least privilege', or 'most likely', and eliminate options that are technically true but do not fit the stated situation.
Is this page an official study resource?
No. This is independent exam-preparation material written to help candidates understand the credential and study efficiently. We are not affiliated with, endorsed by, or sponsored by Hack The Box. For authoritative details on registration, exam rules, scoring, and any updates to the syllabus, always refer to the official certification page.