Cybersecurity Foundation study materials
Cybersecurity Foundation study resources

Cybersecurity Foundation exam-day guide

Cybersecurity Foundation · Prepare for the day ahead.

Your checklist

Government-issued photo ID

Bring the exact ID type and name spelling your registration uses. If your registration name differs from your ID (for example, a shortened first name), contact the provider before test day to correct it; confirm with the provider which ID forms they accept for remote versus in-person delivery.

Appointment confirmation and test-taker ID number

Have your registration confirmation, appointment time, and any candidate ID number accessible. For remote proctoring you may be asked for the exam session code; confirm with the provider where that code appears in your account.

Know your delivery mode and platform requirements

Confirm whether you sit the exam at a test center or via remote proctoring, and check the provider's current system requirements (operating system version, browser, webcam, microphone, bandwidth). Requirements change, so verify against the provider's site rather than older study material.

Run the system or equipment check in advance

If remote, complete any official equipment or identity-verification check the provider offers at least a day ahead. This surfaces camera, audio, or browser-lock issues while you still have time to fix them.

Quiet, private, well-lit room (remote delivery)

The workspace must typically be enclosed, free of other people, and clear of notes, second screens, and unauthorized devices. Confirm with the provider what is allowed on the desk; rules on scratch paper and pens vary and are often strict.

Review the exam guide for format and timing

Know the number of questions, time limit, question style (single-answer, multiple-response, scenario-based), and whether there are unscored pretest items. Confirm with the provider whether any breaks are scheduled and whether the clock stops during them.

Confirm scoring and pass-mark policy

Check how the exam is scored (scaled score versus raw percentage), what the passing threshold is, and when results are released. Do not rely on secondhand claims about the cut score; verify with the provider.

Plan arrival or login buffer time

Arrive at the test center or log in well before your appointment, allowing time for check-in, ID verification, and a room scan. Late arrivals may forfeit the appointment; confirm with the provider how much buffer they recommend.

Test your travel or network plan

For a test center, confirm the address, parking, and transit. For remote delivery, use a stable wired or strong Wi-Fi connection and have a backup plan (for example, a phone hotspot) in case the primary connection fails.

Prepare a study-review sheet, not a cheat sheet

In the final days, review a one-page summary of core domains (for example, security fundamentals, access control, cryptography basics, network security, incident response, and risk management) rather than attempting new topics. Leave prohibited materials outside the testing room.

Rest, hydration, and medication plan

Sleep on a normal schedule the night before and eat a normal meal beforehand. If you need medication, water, or an accommodation during the exam, request it from the provider in advance; unscheduled breaks may not be permitted.

Accommodations request status

If you need extra time, a separate room, or other accommodations, confirm approval well before test day. Accommodation requests usually have lead times; confirm with the provider what documentation and deadlines apply.

Plan the day

Final 72 hours

Stop expanding your syllabus. Re-read your own notes and any official exam objectives, and list the two or three domains where your practice scores are weakest. Do targeted review of those domains only, using short practice sets and reviewing every wrong answer to understand the underlying concept. Confirm your appointment details, delivery mode, and ID name match. If remote, complete the equipment check now.

Final 72 hours (logistics)

Print or save your appointment confirmation, write down the test center address or the login link and start time in your local time zone, and plan travel or set up your testing room. Charge your laptop and any backup device, and confirm your internet connection is stable. Notify household members so the room stays quiet and uninterrupted during the exam.

Final 24 hours

Do a light review of high-yield concepts: authentication factors, least privilege, defense in depth, encryption versus hashing, common attack types, and the incident-response lifecycle. Do not cram new material or take a full-length practice exam late in the day. Prepare your ID, confirmation, and any permitted items, then stop studying early enough to sleep well.

Morning of the exam

Eat a normal meal, hydrate, and avoid heavy caffeine if it makes you anxious. Recheck the start time and time zone, and arrive at the test center or log in with the provider's recommended buffer. For remote delivery, close all other applications, silence notifications, clear your desk, and complete identity verification and the room scan calmly.

During the test (first pass)

Read the full question stem before looking at the options, and watch for qualifiers such as 'BEST', 'MOST likely', 'FIRST', and 'EXCEPT'. Answer the questions you know first. For multiple-response items, note how many answers are required and treat that as a hard constraint. Flag uncertain questions and move on rather than stalling.

During the test (second pass)

Return to flagged items and eliminate clearly wrong options before choosing. For scenario questions, identify the asset, the threat, and the control or process being tested, then pick the answer that addresses the stated objective with the least unnecessary change. Change an answer only when you can name a concrete reason the original was wrong.

During the test (final minutes)

Confirm every question has a response, since unanswered items are typically scored as incorrect. Review any questions where you marked an answer but did not commit, and make a final decision. Submit deliberately and confirm the submission screen before closing the browser or leaving the station.

After submission

Note what the provider says about when and how results are delivered, and keep your confirmation and any score report. If you did not pass, use the score report's domain breakdown to plan a retake; confirm with the provider the waiting period and retake fees before scheduling.

Rules to check

  • Bring only the identification and items the provider explicitly permits. Prohibited items commonly include phones, smartwatches, notes, and second screens; if you are unsure whether an item is allowed, leave it outside the testing room or confirm with the provider beforehand.

  • Your registration name must match your photo ID. If it does not, resolve the mismatch before test day; candidates whose identity cannot be verified may be turned away, and the provider's policy on refunds or rescheduling in that case should be confirmed with the provider.

  • Do not communicate with anyone other than the proctor during the exam, and do not read questions aloud if you are in a shared or monitored setting. Any attempt to capture, share, or discuss live exam content is misconduct and can void your result.

  • Breaks are governed by the provider's rules and may not stop the clock. Confirm in advance whether scheduled or unscheduled breaks are allowed, what you may access during them, and whether leaving the view of the camera or the testing room has consequences.

  • Scoring and the passing standard are set by the provider. Understand whether your result is a scaled score and what threshold applies, and do not assume that a practice-test percentage maps directly onto the real exam's scale.

  • If a technical failure occurs during a remotely proctored exam, stop and contact the proctor or provider support through the channel they specify rather than troubleshooting alone. Follow their instructions; confirm with the provider how interrupted sessions are handled and whether time is restored.

  • Report any irregularity, such as a proctor disconnection or a disrupted session, to the provider promptly and keep a record of the interaction. Do not attempt to retake the exam until the provider confirms how the affected attempt will be treated.

  • Results and score reports are confidential to you. Sharing actual exam questions or reconstructed content with study groups or online forums violates the candidate agreement and can lead to score cancellation; confirm the specific terms you accepted with the provider.