GCDA logo
Focused certification exam prep
Start practice

GCDA Exam Dates 2026: Testing Windows, Deadlines & Scheduling

TL;DR
  • GIAC does not publish fixed GCDA exam dates; you book a proctored slot within your own attempt window.
  • A standalone attempt is accessible for 120 days from activation, and extensions are available.
  • The exam is 75 questions in 2 hours; 76% is the minimum passing score for versions released on or after 2026-04-27.
  • Testing happens via Pearson VUE onsite or ProctorU remote, depending on the modality GIAC assigns.

Why GCDA Has No Fixed Exam Calendar

Candidates searching for "GCDA exam dates 2026" often expect a published calendar of quarterly sittings, the way some certification bodies run fixed testing windows. GIAC Certified Detection Analyst does not work that way. GIAC delivers the exam as a web-based proctored test tied to an individual certification attempt, so the dates that matter are the ones you create: the day your attempt is activated, the day you book your proctored session, and the day your access window closes.

That is good news for working analysts. You are not forced to wait for a seasonal window or rush to meet a registration cutoff. The tradeoff is that nobody is going to hand you a deadline. The 120-day clock on a standalone attempt is the closest thing to a hard deadline in the GCDA process, and it is worth treating as seriously as a fixed exam date would be.

What "2026" actually refers to: The only date-stamped item in the public GCDA facts that affects candidates this year is the passing-score applicability date of 2026-04-27. Everything else, including your testing date, is determined by when you activate your attempt and when you schedule with the proctoring provider.

If you are still deciding whether to pursue the credential at all, the What Is GCDA Certification? overview and the GCDA ROI analysis are better starting points than a calendar. If you have already decided, keep reading for the mechanics.

The 120-Day Attempt Window Explained

Under GIAC's certification attempt delivery policy (updated 2025-05-20), a standalone certification attempt gives you access for 120 days from activation. Extensions are available if you need more time. The window is the scheduling constraint that replaces a published exam calendar, so it deserves a careful read.

What starts the clock

The window runs from activation of the attempt, not from the date you first thought about the exam or the date you finished a training course. Purchasing and activating are separate steps in practice, which means you can buy an attempt and hold off on activation until your preparation is on track. Check the current GIAC attempt-delivery policy and your account's attempt page before relying on any assumption about when your own clock begins.

What the window is for

Four months is enough to take the exam, but it is not a license to coast. Your 120 days need to cover scheduling lead time with the proctoring provider, any optional practice exam, and the exam itself. If you plan to use the optional practice exam, take it early enough in the window that you can act on what it shows you. For the cost implications of buying one, see the GCDA certification cost breakdown.

Extensions are a safety net, not a plan: GIAC offers extensions, but they are an additional purchase decision made under time pressure. Pick a target date inside the original 120 days and treat any extension as a contingency for illness, work emergencies, or a failed readiness check.

From Purchase to Proctored Seat: The Scheduling Sequence

The practical order of operations for a GCDA attempt looks like this:

  1. Confirm eligibility. No prerequisites are required to begin the certification process, and training is optional. The GCDA requirements guide covers what that means in practice.
  2. Purchase the attempt. The exam fee is USD 999, excluding tax. A retake is USD 899, and the optional practice exam is USD 399.
  3. Activate when you are ready. Activation starts the 120-day access period for a standalone attempt.
  4. Review your GIAC account's Certification Information. It governs the objectives, question types, format and passing score for the attempt you purchased.
  5. Schedule with the assigned proctoring modality. Pearson VUE (onsite) or ProctorU (remote), subject to what GIAC assigns.
  6. Sit the exam. One web-based proctored session: 75 questions, 2 hours.

Step 4 is the one candidates skip. The public GIAC pages describe the general GCDA format, but your account's Certification Information is the authoritative record for the specific attempt you bought. Read it before you finalize a study plan.

Pearson VUE vs. ProctorU: Where You Test

GIAC uses two proctoring providers for this exam, and the modality you are offered is subject to GIAC's assignment rather than purely your preference. Plan around both possibilities until you know which applies to you.

FactorPearson VUE (onsite)ProctorU (remote)
LocationTesting centerYour own space, monitored remotely
TravelRequiredNone
Environment controlProvided by the centerYou must prepare and clear your workspace
Paper referencesAllowed per GIAC rulesAllowed per GIAC rules
Electronic references / internetProhibitedProhibited
Who decidesGIAC's assigned modality; see giac.org/proctoring

Whichever provider applies, confirm the identification requirements and check-in procedures in GIAC's proctoring documentation before exam day. Remote candidates should also test their equipment and room setup well ahead of the session, since a technical problem during check-in eats into your preparation focus even if it does not cost you exam time.

The April 27, 2026 Passing-Score Date

One date in the GCDA record is specific and worth understanding correctly: the minimum passing score of 76% applies to exam versions released on or after 2026-04-27. That date identifies when the passing standard applies. It is not a statement that the exam outline was rewritten on that day, and GIAC's public certification page does not identify a separately versioned outline edition.

In practical terms: if your attempt delivers an exam version released on or after that date, 76% is your target. For how that translates to raw question counts on a 75-question exam, and why you should not obsess over the arithmetic, see the GCDA passing score guide. For context on how candidates fare, the GCDA pass rate article explains what is and is not publicly known; GIAC publishes a passing score, not a candidate pass rate.

Reverse-Planning Your Domains From the Exam Date

This is the one place where a study schedule belongs in a dates article: once you pick a testing date inside your 120-day window, you need to allocate the nine GIAC exam objectives across the weeks you have. GIAC publishes the nine objective headings but no official percentage weights, so any weighting you assign is a personal judgment about your own gaps, not an exam blueprint.

Here is one way to sequence them across a roughly eight-week runway, ordered so foundational logging concepts come before the analytics that depend on them:

Weeks 1-2

Foundations: collection and platform

  • Domain 9: SIEM Overview
  • Domain 8: Log Collection and Enrichment
  • Why first: every later domain assumes you understand how data reaches the SIEM and what enrichment adds.
Weeks 3-4

Telemetry-specific analytics

  • Domain 6: Endpoint Analytics
  • Domain 3: Asset and Network Analytics
  • Domain 2: Application Protocol Analytics
Weeks 5-6

Behavior, alerting and application context

  • Domain 1: Application and User Monitoring Analytics
  • Domain 7: Log Analysis and Alerting
Week 7

Cloud and vendor platforms

  • Domain 4: Azure and AWS Logging Overview
  • Domain 5: Defender and Sentinel Overview
Week 8

Index, practice and logistics

  • Finish and tab your paper reference materials
  • Timed practice sets; confirm proctoring check-in details

Why the ordering is GCDA-specific

The cloud and vendor domains (Azure and AWS Logging Overview; Defender and Sentinel Overview) read as platform-specific overviews, so they are easiest to absorb after you have the generic log-collection and SIEM concepts firmly in place. Domains 6, 3 and 2 each concern a distinct telemetry source, which makes them natural to study as a block.

  • Domain 7 (Log Analysis and Alerting) is where detection logic comes together, so give it time after the data-source domains.
  • Keep one buffer week if your window allows; extensions cost money.

If you are following the SANS SEC555 course as optional preparation, note that its five teaching sections are supplemental groupings and do not map one-to-one onto the nine GIAC objectives. The public SEC555 webpage and brochure also use different titles for some sections (including Sections 3 and 5), so treat GIAC's nine objectives as the authority and the course as a way to learn the material. Our GCDA study guide and domain-by-domain breakdown go deeper on each area, and the GCDA training overview covers the course option. Remember that course hours, labs and capstones are separate from the 2-hour proctored exam.

For practice under timed conditions that mirror a 75-question, 2-hour sitting, use the GCDA practice tests as your readiness checkpoint in the final two weeks. If you are unsure how much prep time your background calls for, How Hard Is the GCDA Exam? frames that question honestly.

Retakes, Extensions and the Four-Year Clock

Dates matter after the exam too. Three timelines are worth knowing before you book.

If you do not pass

A retake costs USD 899 (excluding tax). There is no reason to rush a retake booking; use the score feedback and your account's attempt information to identify which of the nine objectives to revisit. See the pricing breakdown to plan the total budget, including the possibility of a second attempt.

If you pass: validity and renewal

GCDA is valid for four years. To renew, you need 36 approved CPE credits earned during the active four-year cycle, or you can pass a renewal exam, in addition to paying the USD 499 renewal fee. Because the CPE route accumulates over the cycle, starting to log eligible activity soon after certification is far less stressful than scrambling in year four. GIAC's renewal how-to guide (2026 edition) lays out the process.

If you need more time before the exam

Request an extension through GIAC before your 120-day window closes rather than after. Policies and extension pricing can change, so verify the current terms on GIAC's attempt delivery policy page.

Key Takeaway

Pick a target test date roughly three-quarters of the way through your 120-day window. That leaves a buffer for rescheduling or a short extension while keeping you from drifting to day 119 without a plan.

Exam-Day Rules That Affect How You Prepare

The scheduling decision and the preparation decision are linked by the exam's reference policy. GCDA is open book, but only with paper references. Electronic references and internet access are prohibited, and so is any material containing exam or practice-exam question-and-answer content. That has direct consequences for how you build your reference set:

  • Index by objective, not by source. Organize your paper notes under the nine GIAC objective headings so you can find an answer quickly across a 75-question, 2-hour sitting. That is an average of well under two minutes per question.
  • Do not stuff your notes with practice-question text. Materials containing exam or practice Q&A are prohibited; build explanatory notes in your own words instead.
  • Finish your indexing before your final week. Fiddling with tabs the night before is a poor use of the last 24 hours.
  • Verify the current rules. GIAC's Proctored Exam Reference Guide is the authoritative document; read it for your provider and modality.

For a compact list of the facts worth putting at your fingertips, the GCDA cheat sheet is a good model for what a one-page summary should contain. And if you are weighing the credential against career goals, the GCDA jobs overview and salary guide are the next stops.

Frequently Asked Questions

Are there set GCDA exam dates in 2026?

No fixed public calendar is published. You schedule a proctored session within the access window of your own certification attempt, which for a standalone attempt is 120 days from activation, with extensions available.

What does the April 27, 2026 date mean for the GCDA exam?

It is the date from which the 76% minimum passing score applies to exam versions released on or after it. It marks score applicability only; it does not signal a new exam outline or a change to the nine objectives.

Can I take the GCDA exam from home?

It depends on GIAC's assigned modality. Exams are delivered through Pearson VUE (onsite) or ProctorU (remote). Check GIAC's proctoring page and your account's attempt details for what applies to you.

How long is the GCDA exam and how many questions does it have?

The exam is one web-based proctored session of 75 questions in 2 hours. Your GIAC account's Certification Information is the authoritative source for question types and format for your specific attempt.

What happens if I fail and need to retake?

A retake costs USD 899, excluding tax. Review the nine exam objectives against your results, tighten your paper reference index, and schedule the retake only when your practice scores show consistent improvement.

Whatever date you choose, anchor it to a plan: activate when you are ready, book inside your 120-day window, and use realistic GCDA practice questions to confirm you are ready before the proctor ever checks you in.

Ready to pass your GCDA exam?

Put this into practice with free GCDA questions across every exam domain.