Exam format
Certified Tester - Infrastructure Exam Format
Everything the official exam blueprint specifies: question count, time limit, scoring and the weight each domain carries. The CREST Certified Tester Infrastructure (CCT INF) certification validates the practical skills and knowledge required to perform infrastructure penetration testing. This intermediate-level credential focuses on assessing the security of networks, operating systems, databases, and web applications. Candidates demonstrate proficiency in using industry-standard testing tools, applying ethical hacking methodologies, and understanding legal and regulatory frameworks. The certification is globally recognized in the cybersecurity industry, particularly for professionals seeking roles in penetration testing teams. It serves as a stepping stone toward more advanced CREST certifications and is often required by organizations for contract roles in security testing.
- 60 questions
- 66% to pass
- 5 domains
certilumExam facts at a glance
The published specifications for this certification.
| Specification | Value |
|---|---|
| Questions | 60 |
| Time limit | Not published by the vendor |
| Passing score | 66% — Written exam: "Candidates must achieve at least two thirds or 66% in each component (multiple choice test and written scenario) to achieve a pass." Practical exam: "Candidates must achieve at least two thirds or 66% in the practical exam to achieve a pass." |
| Domains | 5 |
| Level | Expert |
| Question bank here | 60 questions |
| Published format | Two parts: written exam 3 hours total (multiple-choice test 1 hour + written scenario 2 hours, plus 15 minutes reading time before the scenario) and a practical exam of 3 hours (plus 20 minutes reading time). Number of questions not published; written exam marking: 180 marks (multiple choice 60, written scenario 120), practical 180 marks (four 30-mark sections and one 60-mark section). |
| Source | Official exam specification, published by the vendor |
Official domain weights
The percentage of the exam each domain carries. Weight your revision by these numbers, not by what you find hardest.
| Domain | Weight | Topics | Practice Qs |
|---|---|---|---|
| Network Infrastructure and Protocols | 25% |
| 15 |
| Operating System and Database Security | 20% |
| 12 |
| Security Testing Methodologies and Tools | 20% |
| 12 |
| Application Security and Web Technologies | 20% |
| 12 |
| Legal, Regulatory, and Professional Standards | 15% |
| 9 |
The heaviest domain is Network Infrastructure and Protocols at 25%, and that is where lost points cost you the most. Certilum scores you per domain so you can see the difference between a knowledge gap and a formatting problem.
Note from the vendor record: Issuer: CREST - same body as CCT APP; the two form the paired CREST Certified Tester (CCT) Application and Infrastructure disciplines. Status: active; current syllabus v3 dated 24 January 2024, with new/expanded areas (macOS, Windows desktop lockdown, containerisation, cloud, NoSQL, social engineering) and a note that the Windows Server 2022 practical environment was being introduced later in 2024. Accepted by the UK NCSC as part of the CHECK scheme. No prerequisites (official: "There are no pre-requisites to the CCT INF exam"). Delivery: written exam in 1,000+ Pearson VUE test centres, practical exam booked separately; written results within 20 working days, practical results ~24-48 hours. Renewal/validity period is Not published by the provider on the official exam page. Official exam page
More about the Certified Tester - Infrastructure exam
Explore the rest of this page series: format, cost, difficulty, requirements and how to prepare.
Related certifications
Explore other certifications in the same category and see how they stack up.
Frequently asked questions
Everything you need to know about the Certified Tester - Infrastructure exam.