CrowdStrike Certified Falcon Practitioner

Exam format

CrowdStrike logo

CrowdStrike Certified Falcon Practitioner Exam Format

CCFP

Everything the official exam blueprint specifies: question count, time limit, scoring and the weight each domain carries. The CrowdStrike Certified Falcon Practitioner (CCFP) certification is designed to validate the foundational technical skills required to operate the CrowdStrike Falcon platform effectively. This certification ensures that practitioners can navigate the cloud-native console, manage endpoint security policies, interpret threat intelligence, and execute initial response actions during a security incident. It bridges the gap between theoretical cybersecurity knowledge and practical application within the CrowdStrike ecosystem, focusing on the core pillars of endpoint protection and visibility. As organizations increasingly adopt EDR and NGAV technologies, the CCFP serves as a critical benchmark for security analysts and administrators tasked with defending modern enterprise environments against sophisticated adversaries.

60 questions
90 min
70% to pass
4 domains

Exam facts at a glance

What we know about this exam, and where the information comes from.

SpecificationValue
Questions60
Time limit90 minutes (90s per question)
Passing score70%
Domains4
LevelAssociate
Question bank here60 questions
SourceCertilum's own record — the vendor does not publish this figure

Official domain weights

The percentage of the exam each domain carries. Weight your revision by these numbers, not by what you find hardest.

DomainWeightTopicsPractice Qs
Endpoint Security30%
  • Next-Gen Antivirus (NGAV) configuration
  • Endpoint Detection and Response (EDR) monitoring
  • Policy management
  • +2 more
18
Threat Intelligence20%
  • Indicator of Compromise (IoC) management
  • Threat actor profiling
  • Falcon Intelligence integration
  • +1 more
12
Platform Fundamentals30%
  • Falcon Agent architecture
  • Cloud-native architecture
  • Falcon Console navigation
  • +2 more
18
Response & Investigation20%
  • Real-time response capabilities
  • Incident triage
  • Investigating detection alerts
  • +1 more
12

The heaviest domain is Endpoint Security at 30%, and that is where lost points cost you the most. Certilum scores you per domain so you can see the difference between a knowledge gap and a formatting problem.

Note from the vendor record: Official price of the CrowdStrike exam vouchers (60 questions, 90 min, Pearson VUE). CrowdStrike launched the CCFP at an introductory price of $125 (official CrowdStrike post, Aug-2026). Flex for Services: Subscription users receive the voucher included. Without a voucher, direct payment at Pearson (taxes may be added). Official exam page

More about the CrowdStrike Certified Falcon Practitioner exam

Explore the rest of this page series: format, cost, difficulty, requirements and how to prepare.

Related certifications

Explore other certifications in the same category and see how they stack up.

Frequently asked questions

Everything you need to know about the CrowdStrike Certified Falcon Practitioner exam.