GCDA Passing Score 2026: Exactly What You Need to Pass

The Number: 76% and What It Means

The GIAC Certified Detection Analyst (GCDA) credential sets its minimum passing score at 76%. That figure applies to exam versions released on or after 2026-04-27. If you are planning an attempt in 2026, 76% is the line between a certificate and a retake.

The 76% threshold is a published standard, not a statistic about how other candidates perform. GIAC's public exam page states a passing score; it does not publish a candidate pass rate. If you want to understand what the data does and does not tell us about outcomes, our article on the GCDA pass rate covers it in detail.

Which Exam Versions the 76% Applies To

The passing-score statement carries an applicability date: exam versions released on or after 2026-04-27. That date identifies when the score applies. It does not signal a rewrite of the exam outline, and no separately versioned public outline is identified on GIAC's GCDA page.

There is a practical wrinkle. The purchased attempt's governing details live inside your GIAC account, under the Certification Information for that attempt. GIAC's attempts page indicates that this account-level information controls the objectives, question types, format, and passing score for the attempt you bought. Before you sit the exam, log in and confirm what your specific attempt shows, rather than relying solely on a public page or a third-party summary.

• Check the Certification Information tied to your activated attempt.
• Confirm the passing score listed there matches the 76% public figure.
• Note the objectives listed, since the nine published headings are authoritative.

Turning 76% Into a Question Count

With 75 questions on the exam, 76% is easy to translate into a target. Seventy-six percent of 75 is 57, so on a simple one-point-per-question basis you would need 57 correct answers. Treat that as a planning estimate rather than a guarantee: GIAC's public page states the percentage, and your account's Certification Information governs the actual scoring details for your attempt, including question types.

That pacing figure is the more important number. A detection-focused exam rewards candidates who can read a log excerpt, a query, or a scenario and decide quickly. At roughly a minute and a half per question, you cannot afford to rebuild a concept from scratch every time.

Exam Mechanics That Affect Your Score

One Proctored, Web-Based Sitting

The GCDA is a single web-based proctored exam. GIAC delivers it through Pearson VUE for onsite testing and ProctorU for remote testing, subject to the modality GIAC assigns to your attempt. The details are in GIAC's proctoring documentation, and it is worth reading before test day so that check-in procedures do not eat into your focus.

Course Hours Are Separate From Exam Time

If you take the recommended SANS course, SEC555: Detection Engineering and SIEM Analytics, remember that its lecture hours, labs, and capstones are separate from the two-hour proctored exam. Course exercises build skill, but the exam is a fixed 75-question test under time pressure. Our GCDA difficulty guide explores how that gap between hands-on practice and timed questioning tends to feel.

Nine Objectives, No Published Weights

GIAC publishes nine exam objective headings for the GCDA. Importantly, no official percentage weights are published for them. That means you cannot reliably claim that one domain is worth a set share of your score, and you should be skeptical of any resource that does. Since you need 76% overall, the safest approach is to build competence across all nine areas rather than gambling on a few.

For a deeper walk through each area, see our complete guide to all 9 GCDA content areas.

Open-Book Rules and Your Score

The GCDA is open book, but within limits. Paper references are allowed. Electronic references and internet access are prohibited, and so are materials containing exam or practice-exam Q&A. GIAC's Proctored Exam Reference Guide spells out the specifics.

Open book helps most when you have organized what you bring. An index that maps terms and tools to page numbers can recover valuable seconds, but it cannot rescue a candidate who has never worked with the material. With under two minutes per question, flipping through unfamiliar pages is a losing strategy. Think of your paper references as a way to confirm a detail, not to learn a topic live.

Our GCDA cheat sheet can help you decide which concepts deserve a place in your own quick-reference notes.

Fees, Retakes, and Attempt Windows

The money and timing mechanics connect directly to your passing strategy, because they determine how costly a miss is.

A retake saves only USD 100 compared with the first attempt, so a failed sitting is an expensive lesson. The 120-day access window from activation also deserves planning: do not activate your attempt until your preparation is close to finished. For a full financial view, see our GCDA certification cost breakdown. Scheduling and testing-window questions are covered in our exam dates article.

No prerequisites are required to begin the certification process, and training is optional. If you are unsure whether you qualify to start, our page on GCDA requirements addresses it directly.

Scheduling the Nine Objectives Around a 76% Target

Because no domain weights are published, the sensible plan is breadth first, then depth on your weak spots. Here is one way to sequence the content so that foundational topics come before the ones that depend on them. Adjust the length to your own background and the 120-day window.

The logic is simple: SIEM and collection concepts come first because detection logic is meaningless without understanding the data pipeline. Cloud and Microsoft tooling comes late because those objectives are labeled overviews and benefit from the vocabulary you built earlier. For a fuller preparation roadmap, see our GCDA study guide, and for realistic timed practice, use the GCDA practice tests to check whether you are consistently clearing the 76% mark with room to spare.

After You Pass: Validity and Renewal

The GCDA remains valid for 4 years. To renew, you need either 36 approved CPE credits earned during your active four-year cycle or a passing renewal exam, plus the USD 499 renewal fee. Planning CPE activity early is far easier than scrambling in year four.

Whether the effort pays off depends on your career goals. Our analyses of whether the GCDA is worth it, the salary picture, and the kinds of roles listed in GCDA jobs can help you decide. If you are still orienting yourself, start with what GCDA certification is, and if you want training context, see GCDA training.

For realistic exam-style repetition before your sitting, explore the full question bank at GCDA Exam Prep.

Frequently Asked Questions