GAWN logo
Focused certification exam prep
Start practice

GAWN Requirements 2026: Eligibility, Prerequisites & How to Qualify

TL;DR
  • GIAC requires no formal prerequisites to begin a GAWN attempt; SANS SEC617 training is optional.
  • The exam has 75 questions, a two-hour limit and a 70% minimum passing score.
  • Once your attempt is activated, you have 120 days to complete it.
  • Hardcopy books, notes and an index are allowed; electronic references and internet access are prohibited.

What GIAC Actually Requires to Start

The short answer to "what are the GAWN requirements?" is refreshingly simple: there are no formal prerequisites. GIAC Certifications, the issuer of GIAC Assessing and Auditing Wireless Networks (GAWN), does not require a degree, a prior certification, a minimum number of work years or a training receipt before you begin an attempt. You register, pay for the attempt, activate it and sit the exam.

That openness is deliberate. GIAC certifications validate demonstrated knowledge rather than a résumé checklist. GIAC's published guidance says preparation may come from practical experience, college coursework or independent study, and affiliated SANS training is one option among several. If you have never heard of the credential before today, the overview of what GAWN certification is gives useful grounding before you commit money to an attempt.

Eligibility in one sentence: If you can register with GIAC, pay the attempt fee and meet proctoring requirements, you are eligible to attempt GAWN. Everything else on this page is about whether you are ready, not whether you are allowed.

SEC617 Is Optional, Not a Gate

Many candidates conflate the SANS course that maps to this credential, SEC617: Wireless Penetration Testing and Ethical Hacking, with the exam's eligibility rules. They are separate things. SEC617 has its own course-level expectations, but those are guidance for people enrolling in the class. They are not examination eligibility requirements for GAWN.

That distinction matters for budgeting. Training is priced separately from the certification attempt, so skipping the course is a legitimate path if you already work in wireless assessment or can build competence through labs and self-study. Equally, taking the course does not guarantee a pass: the course curriculum offers unweighted preparation topics, and course labs or capture-the-flag exercises do not define how the GAWN exam itself is composed. For a deeper look at the course side, see our page on GAWN training options.

QuestionAnswer
Degree required?No formal requirement
Prior certification required?No formal requirement
Minimum work experience?No formal requirement
SEC617 required to sit the exam?No; training is optional
Course prerequisites apply to exam eligibility?No; they apply to class enrollment guidance only

Exam Format and Rules You Must Meet

While there are no entry prerequisites, there are firm conduct and format rules attached to every attempt. Knowing them in advance is part of "qualifying," because breaking them can invalidate a result.

The core numbers

  • One web-based, proctored examination
  • 75 questions
  • Two hours to complete it
  • 70% minimum passing score

Our dedicated breakdown of the GAWN passing score explains how that threshold applies in practice.

Delivery and proctoring

You can test remotely through ProctorU or onsite through Pearson VUE, subject to the options authorized for your individual attempt. Check which option your attempt permits before you plan travel or set up a home testing space.

Open book, with limits

GAWN is open book for hardcopy materials: books, notes and an index. Electronic references and internet access are prohibited. Hardcopy materials that resemble practice or exam questions and answers are also prohibited, so do not print dumps or question banks to bring in. Submitted answers cannot be reviewed or changed, which means you answer deliberately and move on.

Why the index matters: An open-book exam rewards organization. A well-built hardcopy index of wireless tooling syntax, protocol details and attack workflows can save minutes per question across 75 items in two hours. That is roughly 1.6 minutes per question, so lookup speed is a real skill.

Fees and the 120-Day Attempt Window

"Requirements" in practice include money and time. GIAC lists current standard USD fees, excluding applicable sales tax:

ItemStandard USD Fee
Certification attempt$999
Retake$899
Practice examination$399
Attempt extension$479
Renewal$499

Training is separate from all of the above. For the full picture, including how these combine in realistic scenarios, read the GAWN certification cost breakdown.

The 120-day clock

Candidates have 120 days from activation to complete an attempt. This is the single most important scheduling requirement. Activate too early and you may burn weeks of the window before you are ready; activate too late and you have no buffer if a proctoring slot is unavailable. If you need more time, an attempt extension is available at the listed fee, but planning to avoid it is cheaper. Our guide to GAWN exam dates and scheduling covers timing strategy in more detail.

Key Takeaway

Do your studying first and your activating second. Treat activation as the moment your 120-day window starts, and work backward from a target test date to decide when to click the button.

Skills That Make You Ready in Practice

GIAC will not stop you from attempting GAWN with no wireless background, but the exam content is technical and hands-on in flavor. The credential concerns assessing and auditing wireless environments, and candidates who struggle most are typically those who have never captured traffic, never configured a monitor-mode adapter and never worked through a handshake attack in a lab. For a candid look at what to expect, see how hard the GAWN exam is.

Useful foundations to have before you start serious preparation:

  • Comfort with Linux command-line work and common security tooling
  • TCP/IP and networking fundamentals, since wireless attacks often pivot into wired networks
  • Basic cryptography concepts, particularly how encryption and authentication protect wireless links
  • A home lab with compatible adapters, an access point you own and permission to test only against equipment you control

Everything in your lab should be authorized. Practice against your own gear or purpose-built lab scenarios, never against networks you do not own or have explicit written permission to test.

The 16 Objective Areas You Are Qualifying Against

The GIAC credential page lists 16 objective headings. GIAC does not publish percentage allocations for them, so you should not assume any one heading carries more weight than another. Treat them as an unweighted checklist. Here they are in source order, with the practical angle that matters for preparation.

Domains 1-4: Protocol Abuse and Short-Range Radio

This opening group spans 802.11 Fuzzing Attacks, Attacking Weak Encryption, Bluetooth Attacks and Bluetooth Low Energy Attacks.

  • Understand how malformed frames probe driver and firmware behavior in 802.11
  • Know why legacy encryption schemes fail and how those failures are demonstrated
  • Distinguish classic Bluetooth from Bluetooth Low Energy, since attack surfaces differ

Domains 5-8: Network Boundaries and Disruption

Bridging the Air Gap, DoS on Wireless Networks, High-Frequency RFID Attacks and Hotspots.

  • Explain how wireless channels can cross isolation boundaries
  • Recognize denial-of-service techniques specific to radio networks
  • Understand hotspot risks, including captive portals and user trust assumptions
  • Know the basics of high-frequency RFID and its common weaknesses

Domains 9-12: Tags, Proximity and Software-Defined Radio

Low-Frequency RFID Attacks, NFC, Practical SDR Attacks and Rogue Networks.

  • Contrast low-frequency and high-frequency RFID behavior
  • Understand NFC use cases and where proximity assumptions break down
  • Grasp what software-defined radio enables for receiving and analyzing signals
  • Identify rogue access point scenarios and how defenders detect them

Domains 13-16: Foundations, Clients and WPA

Sniffing Wireless, Wireless Basics, Wireless Client Attacks and WPA Variants.

  • Capture and interpret wireless traffic correctly
  • Master the vocabulary and mechanics covered under Wireless Basics
  • Know how client devices, not just access points, are targeted
  • Differentiate WPA variants and the weaknesses each one carries

For a heading-by-heading walkthrough, see the complete guide to all 16 GAWN content areas.

Format Questions: CyberLive Badge and Zigbee

Candidates researching requirements sometimes find conflicting hints about format and scope. The GIAC 2026 catalog displays a CyberLive badge for GAWN and mentions Zigbee in marketing text. However, the credential page does not specify the composition of practical items, and it contains no separate Zigbee objective heading. The reliable baseline remains the 16 headings above.

What this means for you: do not assume the exam is multiple-choice only, and do not assume a particular number of lab-style items either. The Certification Information and objective list tied to your own purchased attempt control the question types, scope and passing criteria. Read them carefully when you activate, and let them override anything you read in third-party summaries, including this one.

Source hierarchy: When two sources disagree, trust in this order: the information attached to your own attempt, then the GIAC credential page, then marketing materials, then everything else. Never prepare against claimed question counts or formats you cannot trace to GIAC.

Matching Your Background to a Preparation Plan

This is the one place where scheduling guidance belongs, because the right order depends on what you already know. Start with the foundations that everything else builds on, then move to the specialized radio topics.

Early

Wireless Basics, Sniffing Wireless, WPA Variants

  • These underpin nearly every other objective, so master them first
  • Build your lab and get capture working reliably
Middle

Attacking Weak Encryption, Wireless Client Attacks, Rogue Networks, Hotspots

  • Apply foundation knowledge to concrete attack and defense workflows
  • Start building your hardcopy index entries as you go
Later

Bluetooth, BLE, RFID, NFC, SDR, Air Gap, Fuzzing, DoS

  • Specialized radio topics are easier once core concepts are solid
  • Review weak areas, then take the optional practice examination

If you want a full plan with resource suggestions, our GAWN study guide goes deeper, and a quick-reference GAWN cheat sheet helps with final review. You can also pressure-test your readiness with GAWN practice questions on the main site, which are original items and not exam dumps.

Keeping the Credential Valid

Qualifying does not end when you pass. GAWN is valid for four years. Renewal requires 36 approved continuing professional education (CPE) credits earned during the active cycle, or successful re-examination, plus the applicable renewal fee. Plan for CPE accumulation from the start of the cycle rather than scrambling in year four; activities such as attending relevant training, conferences and security work can contribute when approved under GIAC's rules.

If you are weighing the long-term commitment, consider how the credential supports career goals. Our analyses of the GAWN certification's return on investment and the roles listed on the GAWN jobs page help frame whether the fees and renewal effort fit your plans. Wireless assessment skills tend to be relevant to penetration testers, red team members, security auditors and network security engineers, though specific hiring outcomes depend on the employer and market.

Frequently Asked Questions

Do I need to take SANS SEC617 before attempting GAWN?

No. GIAC requires no formal prerequisites to begin an attempt, and affiliated SANS training is optional. SEC617 course prerequisites are guidance for class enrollment, not exam eligibility requirements. Preparation can come from experience, coursework or independent study.

Do I need a degree or prior certification to sit the exam?

No. GIAC does not impose a degree, prior certification or minimum work-experience requirement for starting a GAWN certification attempt. You need to register, pay the attempt fee and meet proctoring requirements.

How long do I have to complete the exam once I start?

Candidates have 120 days from activation to complete an attempt. The exam itself has a two-hour time limit for 75 questions. An attempt extension is available for a fee if you need more time before the window closes.

Can I bring reference materials into the exam?

Yes, hardcopy books, notes and an index are permitted. Electronic references and internet access are prohibited, and hardcopy materials resembling practice or exam questions and answers are not allowed. Answers cannot be reviewed or changed after submission.

How long is GAWN valid, and what does renewal require?

The certification is valid for four years. Renewal requires 36 approved CPE credits earned during the active cycle or successful re-examination, plus the applicable renewal fee. See the GAWN certification overview for more context on the credential lifecycle.

Ready to pass your GAWN exam?

Put this into practice with free GAWN questions across every exam domain.