- The Number: 70% on 75 Questions
- What 70% Means in Practical Terms
- Question Format: What Is and Is Not Confirmed
- The 16 Objective Headings Behind the Score
- Open-Book Rules That Affect Your Score
- Attempt Mechanics, Fees, and the 120-Day Window
- Building a Score-Focused Preparation Plan
- After You Pass: Validity and Renewal
- Frequently Asked Questions
- The GAWN requires a 70% minimum passing score on a single proctored exam of 75 questions in two hours.
- GIAC publishes 16 objective headings for GAWN but no percentage weighting, so no domain can be safely skipped.
- Hardcopy books, notes, and an index are allowed; electronic references and internet access are prohibited.
- Submitted answers cannot be reviewed or changed, so each response must be final when you submit it.
The Number: 70% on 75 Questions
The GIAC Assessing and Auditing Wireless Networks (GAWN) credential page states a clear standard: one web-based, proctored examination with 75 questions, a two-hour limit, and a 70% minimum passing score. That is the whole formal definition of "passing." There is no separate section cutoff published on the credential page, no sliding scale, and no published curve. You either reach the minimum standard on the exam as a whole or you do not.
This article focuses on what that number means for someone preparing to attack and audit wireless environments, and how to turn a passing threshold into a concrete preparation target. If you are still deciding whether to pursue the credential, see our overview at What Is GAWN Certification? and the broader ROI analysis of the GAWN certification.
What 70% Means in Practical Terms
Seventy percent of 75 questions works out to 52.5, so in practice you should plan around answering at least 53 items correctly if every question carries equal weight. Treat that as a planning estimate rather than a published guarantee: GIAC's credential page states the percentage, and the exact scoring mechanics for your specific attempt are governed by the Certification Information that accompanies it. If your exam includes any item types that are scored differently, the raw-count arithmetic could shift.
What the number does tell you is the margin for error. You can miss roughly a quarter of the exam and still pass. That sounds generous until you consider the breadth of the GAWN scope, which spans everything from 802.11 fuzzing to low-frequency RFID. A candidate who is excellent at WPA attacks but has never touched Bluetooth Low Energy can lose a large block of points in a single area.
Key Takeaway
Because GIAC does not publish domain weights, the safest interpretation of the 70% line is breadth first. Aim for solid competence across all 16 headings rather than mastery of a few favorites.
For a sense of how demanding that breadth is in practice, read How Hard Is the GAWN Exam?, and for what published data does and does not tell us about outcomes, see GAWN Pass Rate 2026: What the Data Shows.
Question Format: What Is and Is Not Confirmed
Candidates often ask whether GAWN is purely multiple choice or includes hands-on, practical items. The honest answer is that the sources disagree in emphasis, and you should plan around what is confirmed.
- The credential page specifies 75 questions, two hours, and a 70% minimum score, but it does not specify the composition of practical items.
- The GIAC Catalog 2026 displays a CyberLive badge for GAWN, which signals that practical-style, hands-on elements may be part of the offering, and its marketing text mentions Zigbee.
- The credential page, however, has no separate Zigbee objective heading and gives no lab-item count.
The practical consequence is simple: prepare to do wireless work, not just recognize terminology. Candidates who have only read about deauthentication, rogue access points, or SDR capture workflows tend to struggle when a question asks them to reason through what a tool output means or which attack step comes next.
The 16 Objective Headings Behind the Score
Your 70% is earned across the formal objective headings that GIAC lists for GAWN. These are reproduced here in source order. GIAC does not publish percentage allocations for them, so no heading should be treated as the "heaviest." For a deeper walkthrough of each area, see GAWN Exam Domains 2026: Complete Guide to All 16 Content Areas.
| # | Objective Heading | Why It Matters for Scoring |
|---|---|---|
| 1 | 802.11 Fuzzing Attacks | Frame-level manipulation and protocol robustness testing |
| 2 | Attacking Weak Encryption | Legacy cipher weaknesses and why they fail |
| 3 | Bluetooth Attacks | Classic Bluetooth discovery, pairing, and exploitation concepts |
| 4 | Bluetooth Low Energy Attacks | BLE advertising, pairing, and GATT-level weaknesses |
| 5 | Bridging the Air Gap | Wireless paths into isolated environments |
| 6 | DoS on Wireless Networks | Disruption techniques and their detection |
| 7 | High-Frequency RFID Attacks | 13.56 MHz-class tag and reader weaknesses |
| 8 | Hotspots | Captive portals and public-access risks |
| 9 | Low-Frequency RFID Attacks | Legacy access-card cloning and replay concepts |
| 10 | NFC | Near-field communication interactions and abuse |
| 11 | Practical SDR Attacks | Capturing, analyzing, and replaying signals with software-defined radio |
| 12 | Rogue Networks | Evil twin and unauthorized access point scenarios |
| 13 | Sniffing Wireless | Capture methodology, interfaces, and traffic analysis |
| 14 | Wireless Basics | Foundational standards, frame types, and terminology |
| 15 | Wireless Client Attacks | Probe behavior, client-side exposure, and association abuse |
| 16 | WPA Variants | Personal versus Enterprise modes and their attack surfaces |
Where candidates quietly lose points
The non-802.11 headings are the common gap. Many wireless testers are strong on Wi-Fi but thin on the following areas:
- High-Frequency RFID Attacks and Low-Frequency RFID Attacks, which require understanding card families and what can and cannot be cloned
- NFC, where the relationship to high-frequency RFID is easy to blur
- Practical SDR Attacks, which reward hands-on familiarity with capture and replay workflows
- Bluetooth and Bluetooth Low Energy Attacks, which are distinct objective headings with different protocols
Because Wireless Basics is itself an objective heading, do not skip fundamentals. Questions in advanced areas often assume you already understand frame structure, channel behavior, and encryption handshakes.
Open-Book Rules That Affect Your Score
GAWN is open book in a specific, limited way. You may bring hardcopy books, notes, and an index. You may not use electronic references or internet access. Hardcopy materials that resemble practice or examination questions and answers are also prohibited.
For a two-hour, 75-question exam, that works out to well under two minutes per question on average. An open-book allowance does not rescue a candidate who has to look up everything. It rewards candidates who built a fast, personal index so a lookup takes seconds, not minutes.
Remember that submitted answers cannot be reviewed or changed. That removes the usual "flag and come back" safety net. Decide, commit, and move on. Our GAWN Cheat Sheet pairs well with building a compliant hardcopy reference set from your own notes.
Attempt Mechanics, Fees, and the 120-Day Window
The passing score only matters if you can sit the exam on your terms, so understand how an attempt works. GIAC lists current standard USD fees, excluding applicable sales tax:
| Item | Standard USD Fee |
|---|---|
| Certification attempt | $999 |
| Retake | $899 |
| Practice examination | $399 |
| Attempt extension | $479 |
| Renewal | $499 |
Training is priced separately. For a full breakdown of what a realistic total looks like, read GAWN Certification Cost 2026: Complete Pricing Breakdown.
Once your attempt is activated, you have 120 days to complete it. Delivery is remote through ProctorU or onsite through Pearson VUE, subject to the options authorized for your individual attempt. Because a failed first try means paying a retake fee, the cost of an unprepared attempt is real. For scheduling considerations, see GAWN Exam Dates 2026: Testing Windows, Deadlines & Scheduling.
On eligibility: GIAC requires no formal prerequisites to begin a certification attempt. Affiliated SANS training is optional, and preparation may come from practical experience, college coursework, or independent study. Course prerequisites for related SANS training are not exam eligibility requirements. More detail lives in GAWN Requirements 2026: Eligibility, Prerequisites & How to Qualify.
Building a Score-Focused Preparation Plan
Since no domain weights are published, your plan should protect against weak spots rather than chase a guessed high-value area. Here is one way to sequence the 16 headings across a hands-on preparation window. Adjust the length to your own experience and your 120-day attempt window.
Foundations and Sniffing
- Wireless Basics: standards, frame types, terminology
- Sniffing Wireless: capture setup and traffic analysis
- Start building your hardcopy index from day one
Encryption and WPA
- Attacking Weak Encryption
- WPA Variants, including how Personal and Enterprise differ
Network and Client Attacks
- Rogue Networks, Hotspots, and Wireless Client Attacks
- DoS on Wireless Networks and 802.11 Fuzzing Attacks
Beyond Wi-Fi
- Bluetooth Attacks and Bluetooth Low Energy Attacks
- High-Frequency RFID, Low-Frequency RFID, and NFC
- Practical SDR Attacks and Bridging the Air Gap
Timed Practice and Index Polish
- Run timed sets of original practice questions against the two-hour clock
- Trim your index so lookups take seconds
The reasoning behind this order: Wi-Fi fundamentals and sniffing underpin nearly everything else, so they come first. The non-Wi-Fi radio topics go in a dedicated block because they are the most common blind spot and need hands-on time with real hardware or authorized lab scenarios. For a fuller study framework, see the GAWN Study Guide 2026 and the notes on GAWN training options.
Key Takeaway
Use original practice questions and authorized lab scenarios only. Hardcopy material that resembles real exam questions and answers is prohibited in the testing room, and exam-dump shortcuts do not build the hands-on judgment the exam rewards. You can test your readiness with timed sets on the GAWN Exam Prep practice test site.
After You Pass: Validity and Renewal
A GAWN certification is valid for four years. Renewal requires 36 approved continuing professional education credits earned during the active cycle, or successful re-examination, plus the applicable renewal fee ($499 at the current standard rate). Because renewal is a recurring cost and effort, factor it into long-term planning alongside the one-time exam cost.
Passing also opens doors in the market. Employers hiring for wireless assessment, red team, and physical-security testing roles look for evidence that a candidate can work across Wi-Fi, Bluetooth, RFID, and SDR, not just one of them. For the employment side, see GAWN Jobs and the GAWN Salary Guide 2026, which discuss earnings qualitatively and in context.
Frequently Asked Questions
The GIAC credential page specifies a 70% minimum passing score on a single proctored examination of 75 questions with a two-hour time limit. Scoring specifics for your attempt are governed by the Certification Information tied to your purchased GIAC attempt.
No. GIAC lists 16 objective headings for GAWN but does not publish percentage allocations on the credential page, so no heading can be credibly called the highest-weighted. Prepare for all of them.
No. Submitted answers cannot be reviewed or changed. Commit to each answer as you go and manage your time against the two-hour limit so you are not rushing the final questions.
The exam is open book for hardcopy books, notes, and an index. Electronic references and internet access are prohibited, as are hardcopy materials that resemble practice or exam questions and answers.
You can purchase a retake, currently $899 at the standard rate, excluding applicable sales tax. You can also buy an attempt extension ($479) if you need more time within your activation window. See the cost breakdown for planning.