- Why GCDA Has No Fixed Exam Calendar
- The 120-Day Attempt Window Explained
- From Purchase to Proctored Seat: The Scheduling Sequence
- Pearson VUE vs. ProctorU: Where You Test
- The April 27, 2026 Passing-Score Date
- Reverse-Planning Your Domains From the Exam Date
- Retakes, Extensions and the Four-Year Clock
- Exam-Day Rules That Affect How You Prepare
- Frequently Asked Questions
- GIAC does not publish fixed GCDA exam dates; you book a proctored slot within your own attempt window.
- A standalone attempt is accessible for 120 days from activation, and extensions are available.
- The exam is 75 questions in 2 hours; 76% is the minimum passing score for versions released on or after 2026-04-27.
- Testing happens via Pearson VUE onsite or ProctorU remote, depending on the modality GIAC assigns.
Why GCDA Has No Fixed Exam Calendar
Candidates searching for "GCDA exam dates 2026" often expect a published calendar of quarterly sittings, the way some certification bodies run fixed testing windows. GIAC Certified Detection Analyst does not work that way. GIAC delivers the exam as a web-based proctored test tied to an individual certification attempt, so the dates that matter are the ones you create: the day your attempt is activated, the day you book your proctored session, and the day your access window closes.
That is good news for working analysts. You are not forced to wait for a seasonal window or rush to meet a registration cutoff. The tradeoff is that nobody is going to hand you a deadline. The 120-day clock on a standalone attempt is the closest thing to a hard deadline in the GCDA process, and it is worth treating as seriously as a fixed exam date would be.
If you are still deciding whether to pursue the credential at all, the What Is GCDA Certification? overview and the GCDA ROI analysis are better starting points than a calendar. If you have already decided, keep reading for the mechanics.
The 120-Day Attempt Window Explained
Under GIAC's certification attempt delivery policy (updated 2025-05-20), a standalone certification attempt gives you access for 120 days from activation. Extensions are available if you need more time. The window is the scheduling constraint that replaces a published exam calendar, so it deserves a careful read.
What starts the clock
The window runs from activation of the attempt, not from the date you first thought about the exam or the date you finished a training course. Purchasing and activating are separate steps in practice, which means you can buy an attempt and hold off on activation until your preparation is on track. Check the current GIAC attempt-delivery policy and your account's attempt page before relying on any assumption about when your own clock begins.
What the window is for
Four months is enough to take the exam, but it is not a license to coast. Your 120 days need to cover scheduling lead time with the proctoring provider, any optional practice exam, and the exam itself. If you plan to use the optional practice exam, take it early enough in the window that you can act on what it shows you. For the cost implications of buying one, see the GCDA certification cost breakdown.
From Purchase to Proctored Seat: The Scheduling Sequence
The practical order of operations for a GCDA attempt looks like this:
- Confirm eligibility. No prerequisites are required to begin the certification process, and training is optional. The GCDA requirements guide covers what that means in practice.
- Purchase the attempt. The exam fee is USD 999, excluding tax. A retake is USD 899, and the optional practice exam is USD 399.
- Activate when you are ready. Activation starts the 120-day access period for a standalone attempt.
- Review your GIAC account's Certification Information. It governs the objectives, question types, format and passing score for the attempt you purchased.
- Schedule with the assigned proctoring modality. Pearson VUE (onsite) or ProctorU (remote), subject to what GIAC assigns.
- Sit the exam. One web-based proctored session: 75 questions, 2 hours.
Step 4 is the one candidates skip. The public GIAC pages describe the general GCDA format, but your account's Certification Information is the authoritative record for the specific attempt you bought. Read it before you finalize a study plan.
Pearson VUE vs. ProctorU: Where You Test
GIAC uses two proctoring providers for this exam, and the modality you are offered is subject to GIAC's assignment rather than purely your preference. Plan around both possibilities until you know which applies to you.
| Factor | Pearson VUE (onsite) | ProctorU (remote) |
|---|---|---|
| Location | Testing center | Your own space, monitored remotely |
| Travel | Required | None |
| Environment control | Provided by the center | You must prepare and clear your workspace |
| Paper references | Allowed per GIAC rules | Allowed per GIAC rules |
| Electronic references / internet | Prohibited | Prohibited |
| Who decides | GIAC's assigned modality; see giac.org/proctoring | |
Whichever provider applies, confirm the identification requirements and check-in procedures in GIAC's proctoring documentation before exam day. Remote candidates should also test their equipment and room setup well ahead of the session, since a technical problem during check-in eats into your preparation focus even if it does not cost you exam time.
The April 27, 2026 Passing-Score Date
One date in the GCDA record is specific and worth understanding correctly: the minimum passing score of 76% applies to exam versions released on or after 2026-04-27. That date identifies when the passing standard applies. It is not a statement that the exam outline was rewritten on that day, and GIAC's public certification page does not identify a separately versioned outline edition.
In practical terms: if your attempt delivers an exam version released on or after that date, 76% is your target. For how that translates to raw question counts on a 75-question exam, and why you should not obsess over the arithmetic, see the GCDA passing score guide. For context on how candidates fare, the GCDA pass rate article explains what is and is not publicly known; GIAC publishes a passing score, not a candidate pass rate.
Reverse-Planning Your Domains From the Exam Date
This is the one place where a study schedule belongs in a dates article: once you pick a testing date inside your 120-day window, you need to allocate the nine GIAC exam objectives across the weeks you have. GIAC publishes the nine objective headings but no official percentage weights, so any weighting you assign is a personal judgment about your own gaps, not an exam blueprint.
Here is one way to sequence them across a roughly eight-week runway, ordered so foundational logging concepts come before the analytics that depend on them:
Foundations: collection and platform
- Domain 9: SIEM Overview
- Domain 8: Log Collection and Enrichment
- Why first: every later domain assumes you understand how data reaches the SIEM and what enrichment adds.
Telemetry-specific analytics
- Domain 6: Endpoint Analytics
- Domain 3: Asset and Network Analytics
- Domain 2: Application Protocol Analytics
Behavior, alerting and application context
- Domain 1: Application and User Monitoring Analytics
- Domain 7: Log Analysis and Alerting
Cloud and vendor platforms
- Domain 4: Azure and AWS Logging Overview
- Domain 5: Defender and Sentinel Overview
Index, practice and logistics
- Finish and tab your paper reference materials
- Timed practice sets; confirm proctoring check-in details
Why the ordering is GCDA-specific
The cloud and vendor domains (Azure and AWS Logging Overview; Defender and Sentinel Overview) read as platform-specific overviews, so they are easiest to absorb after you have the generic log-collection and SIEM concepts firmly in place. Domains 6, 3 and 2 each concern a distinct telemetry source, which makes them natural to study as a block.
- Domain 7 (Log Analysis and Alerting) is where detection logic comes together, so give it time after the data-source domains.
- Keep one buffer week if your window allows; extensions cost money.
If you are following the SANS SEC555 course as optional preparation, note that its five teaching sections are supplemental groupings and do not map one-to-one onto the nine GIAC objectives. The public SEC555 webpage and brochure also use different titles for some sections (including Sections 3 and 5), so treat GIAC's nine objectives as the authority and the course as a way to learn the material. Our GCDA study guide and domain-by-domain breakdown go deeper on each area, and the GCDA training overview covers the course option. Remember that course hours, labs and capstones are separate from the 2-hour proctored exam.
For practice under timed conditions that mirror a 75-question, 2-hour sitting, use the GCDA practice tests as your readiness checkpoint in the final two weeks. If you are unsure how much prep time your background calls for, How Hard Is the GCDA Exam? frames that question honestly.
Retakes, Extensions and the Four-Year Clock
Dates matter after the exam too. Three timelines are worth knowing before you book.
If you do not pass
A retake costs USD 899 (excluding tax). There is no reason to rush a retake booking; use the score feedback and your account's attempt information to identify which of the nine objectives to revisit. See the pricing breakdown to plan the total budget, including the possibility of a second attempt.
If you pass: validity and renewal
GCDA is valid for four years. To renew, you need 36 approved CPE credits earned during the active four-year cycle, or you can pass a renewal exam, in addition to paying the USD 499 renewal fee. Because the CPE route accumulates over the cycle, starting to log eligible activity soon after certification is far less stressful than scrambling in year four. GIAC's renewal how-to guide (2026 edition) lays out the process.
If you need more time before the exam
Request an extension through GIAC before your 120-day window closes rather than after. Policies and extension pricing can change, so verify the current terms on GIAC's attempt delivery policy page.
Key Takeaway
Pick a target test date roughly three-quarters of the way through your 120-day window. That leaves a buffer for rescheduling or a short extension while keeping you from drifting to day 119 without a plan.
Exam-Day Rules That Affect How You Prepare
The scheduling decision and the preparation decision are linked by the exam's reference policy. GCDA is open book, but only with paper references. Electronic references and internet access are prohibited, and so is any material containing exam or practice-exam question-and-answer content. That has direct consequences for how you build your reference set:
- Index by objective, not by source. Organize your paper notes under the nine GIAC objective headings so you can find an answer quickly across a 75-question, 2-hour sitting. That is an average of well under two minutes per question.
- Do not stuff your notes with practice-question text. Materials containing exam or practice Q&A are prohibited; build explanatory notes in your own words instead.
- Finish your indexing before your final week. Fiddling with tabs the night before is a poor use of the last 24 hours.
- Verify the current rules. GIAC's Proctored Exam Reference Guide is the authoritative document; read it for your provider and modality.
For a compact list of the facts worth putting at your fingertips, the GCDA cheat sheet is a good model for what a one-page summary should contain. And if you are weighing the credential against career goals, the GCDA jobs overview and salary guide are the next stops.
Frequently Asked Questions
No fixed public calendar is published. You schedule a proctored session within the access window of your own certification attempt, which for a standalone attempt is 120 days from activation, with extensions available.
It is the date from which the 76% minimum passing score applies to exam versions released on or after it. It marks score applicability only; it does not signal a new exam outline or a change to the nine objectives.
It depends on GIAC's assigned modality. Exams are delivered through Pearson VUE (onsite) or ProctorU (remote). Check GIAC's proctoring page and your account's attempt details for what applies to you.
The exam is one web-based proctored session of 75 questions in 2 hours. Your GIAC account's Certification Information is the authoritative source for question types and format for your specific attempt.
A retake costs USD 899, excluding tax. Review the nine exam objectives against your results, tighten your paper reference index, and schedule the retake only when your practice scores show consistent improvement.
Whatever date you choose, anchor it to a plan: activate when you are ready, book inside your 120-day window, and use realistic GCDA practice questions to confirm you are ready before the proctor ever checks you in.