- What GIAC Actually Requires to Start
- SEC617 Is Optional, Not a Gate
- Exam Format and Rules You Must Meet
- Fees and the 120-Day Attempt Window
- Skills That Make You Ready in Practice
- The 16 Objective Areas You Are Qualifying Against
- Format Questions: CyberLive Badge and Zigbee
- Matching Your Background to a Preparation Plan
- Keeping the Credential Valid
- Frequently Asked Questions
- GIAC requires no formal prerequisites to begin a GAWN attempt; SANS SEC617 training is optional.
- The exam has 75 questions, a two-hour limit and a 70% minimum passing score.
- Once your attempt is activated, you have 120 days to complete it.
- Hardcopy books, notes and an index are allowed; electronic references and internet access are prohibited.
What GIAC Actually Requires to Start
The short answer to "what are the GAWN requirements?" is refreshingly simple: there are no formal prerequisites. GIAC Certifications, the issuer of GIAC Assessing and Auditing Wireless Networks (GAWN), does not require a degree, a prior certification, a minimum number of work years or a training receipt before you begin an attempt. You register, pay for the attempt, activate it and sit the exam.
That openness is deliberate. GIAC certifications validate demonstrated knowledge rather than a résumé checklist. GIAC's published guidance says preparation may come from practical experience, college coursework or independent study, and affiliated SANS training is one option among several. If you have never heard of the credential before today, the overview of what GAWN certification is gives useful grounding before you commit money to an attempt.
SEC617 Is Optional, Not a Gate
Many candidates conflate the SANS course that maps to this credential, SEC617: Wireless Penetration Testing and Ethical Hacking, with the exam's eligibility rules. They are separate things. SEC617 has its own course-level expectations, but those are guidance for people enrolling in the class. They are not examination eligibility requirements for GAWN.
That distinction matters for budgeting. Training is priced separately from the certification attempt, so skipping the course is a legitimate path if you already work in wireless assessment or can build competence through labs and self-study. Equally, taking the course does not guarantee a pass: the course curriculum offers unweighted preparation topics, and course labs or capture-the-flag exercises do not define how the GAWN exam itself is composed. For a deeper look at the course side, see our page on GAWN training options.
| Question | Answer |
|---|---|
| Degree required? | No formal requirement |
| Prior certification required? | No formal requirement |
| Minimum work experience? | No formal requirement |
| SEC617 required to sit the exam? | No; training is optional |
| Course prerequisites apply to exam eligibility? | No; they apply to class enrollment guidance only |
Exam Format and Rules You Must Meet
While there are no entry prerequisites, there are firm conduct and format rules attached to every attempt. Knowing them in advance is part of "qualifying," because breaking them can invalidate a result.
The core numbers
- One web-based, proctored examination
- 75 questions
- Two hours to complete it
- 70% minimum passing score
Our dedicated breakdown of the GAWN passing score explains how that threshold applies in practice.
Delivery and proctoring
You can test remotely through ProctorU or onsite through Pearson VUE, subject to the options authorized for your individual attempt. Check which option your attempt permits before you plan travel or set up a home testing space.
Open book, with limits
GAWN is open book for hardcopy materials: books, notes and an index. Electronic references and internet access are prohibited. Hardcopy materials that resemble practice or exam questions and answers are also prohibited, so do not print dumps or question banks to bring in. Submitted answers cannot be reviewed or changed, which means you answer deliberately and move on.
Fees and the 120-Day Attempt Window
"Requirements" in practice include money and time. GIAC lists current standard USD fees, excluding applicable sales tax:
| Item | Standard USD Fee |
|---|---|
| Certification attempt | $999 |
| Retake | $899 |
| Practice examination | $399 |
| Attempt extension | $479 |
| Renewal | $499 |
Training is separate from all of the above. For the full picture, including how these combine in realistic scenarios, read the GAWN certification cost breakdown.
The 120-day clock
Candidates have 120 days from activation to complete an attempt. This is the single most important scheduling requirement. Activate too early and you may burn weeks of the window before you are ready; activate too late and you have no buffer if a proctoring slot is unavailable. If you need more time, an attempt extension is available at the listed fee, but planning to avoid it is cheaper. Our guide to GAWN exam dates and scheduling covers timing strategy in more detail.
Key Takeaway
Do your studying first and your activating second. Treat activation as the moment your 120-day window starts, and work backward from a target test date to decide when to click the button.
Skills That Make You Ready in Practice
GIAC will not stop you from attempting GAWN with no wireless background, but the exam content is technical and hands-on in flavor. The credential concerns assessing and auditing wireless environments, and candidates who struggle most are typically those who have never captured traffic, never configured a monitor-mode adapter and never worked through a handshake attack in a lab. For a candid look at what to expect, see how hard the GAWN exam is.
Useful foundations to have before you start serious preparation:
- Comfort with Linux command-line work and common security tooling
- TCP/IP and networking fundamentals, since wireless attacks often pivot into wired networks
- Basic cryptography concepts, particularly how encryption and authentication protect wireless links
- A home lab with compatible adapters, an access point you own and permission to test only against equipment you control
Everything in your lab should be authorized. Practice against your own gear or purpose-built lab scenarios, never against networks you do not own or have explicit written permission to test.
The 16 Objective Areas You Are Qualifying Against
The GIAC credential page lists 16 objective headings. GIAC does not publish percentage allocations for them, so you should not assume any one heading carries more weight than another. Treat them as an unweighted checklist. Here they are in source order, with the practical angle that matters for preparation.
Domains 1-4: Protocol Abuse and Short-Range Radio
This opening group spans 802.11 Fuzzing Attacks, Attacking Weak Encryption, Bluetooth Attacks and Bluetooth Low Energy Attacks.
- Understand how malformed frames probe driver and firmware behavior in 802.11
- Know why legacy encryption schemes fail and how those failures are demonstrated
- Distinguish classic Bluetooth from Bluetooth Low Energy, since attack surfaces differ
Domains 5-8: Network Boundaries and Disruption
Bridging the Air Gap, DoS on Wireless Networks, High-Frequency RFID Attacks and Hotspots.
- Explain how wireless channels can cross isolation boundaries
- Recognize denial-of-service techniques specific to radio networks
- Understand hotspot risks, including captive portals and user trust assumptions
- Know the basics of high-frequency RFID and its common weaknesses
Domains 9-12: Tags, Proximity and Software-Defined Radio
Low-Frequency RFID Attacks, NFC, Practical SDR Attacks and Rogue Networks.
- Contrast low-frequency and high-frequency RFID behavior
- Understand NFC use cases and where proximity assumptions break down
- Grasp what software-defined radio enables for receiving and analyzing signals
- Identify rogue access point scenarios and how defenders detect them
Domains 13-16: Foundations, Clients and WPA
Sniffing Wireless, Wireless Basics, Wireless Client Attacks and WPA Variants.
- Capture and interpret wireless traffic correctly
- Master the vocabulary and mechanics covered under Wireless Basics
- Know how client devices, not just access points, are targeted
- Differentiate WPA variants and the weaknesses each one carries
For a heading-by-heading walkthrough, see the complete guide to all 16 GAWN content areas.
Format Questions: CyberLive Badge and Zigbee
Candidates researching requirements sometimes find conflicting hints about format and scope. The GIAC 2026 catalog displays a CyberLive badge for GAWN and mentions Zigbee in marketing text. However, the credential page does not specify the composition of practical items, and it contains no separate Zigbee objective heading. The reliable baseline remains the 16 headings above.
What this means for you: do not assume the exam is multiple-choice only, and do not assume a particular number of lab-style items either. The Certification Information and objective list tied to your own purchased attempt control the question types, scope and passing criteria. Read them carefully when you activate, and let them override anything you read in third-party summaries, including this one.
Matching Your Background to a Preparation Plan
This is the one place where scheduling guidance belongs, because the right order depends on what you already know. Start with the foundations that everything else builds on, then move to the specialized radio topics.
Wireless Basics, Sniffing Wireless, WPA Variants
- These underpin nearly every other objective, so master them first
- Build your lab and get capture working reliably
Attacking Weak Encryption, Wireless Client Attacks, Rogue Networks, Hotspots
- Apply foundation knowledge to concrete attack and defense workflows
- Start building your hardcopy index entries as you go
Bluetooth, BLE, RFID, NFC, SDR, Air Gap, Fuzzing, DoS
- Specialized radio topics are easier once core concepts are solid
- Review weak areas, then take the optional practice examination
If you want a full plan with resource suggestions, our GAWN study guide goes deeper, and a quick-reference GAWN cheat sheet helps with final review. You can also pressure-test your readiness with GAWN practice questions on the main site, which are original items and not exam dumps.
Keeping the Credential Valid
Qualifying does not end when you pass. GAWN is valid for four years. Renewal requires 36 approved continuing professional education (CPE) credits earned during the active cycle, or successful re-examination, plus the applicable renewal fee. Plan for CPE accumulation from the start of the cycle rather than scrambling in year four; activities such as attending relevant training, conferences and security work can contribute when approved under GIAC's rules.
If you are weighing the long-term commitment, consider how the credential supports career goals. Our analyses of the GAWN certification's return on investment and the roles listed on the GAWN jobs page help frame whether the fees and renewal effort fit your plans. Wireless assessment skills tend to be relevant to penetration testers, red team members, security auditors and network security engineers, though specific hiring outcomes depend on the employer and market.
Frequently Asked Questions
No. GIAC requires no formal prerequisites to begin an attempt, and affiliated SANS training is optional. SEC617 course prerequisites are guidance for class enrollment, not exam eligibility requirements. Preparation can come from experience, coursework or independent study.
No. GIAC does not impose a degree, prior certification or minimum work-experience requirement for starting a GAWN certification attempt. You need to register, pay the attempt fee and meet proctoring requirements.
Candidates have 120 days from activation to complete an attempt. The exam itself has a two-hour time limit for 75 questions. An attempt extension is available for a fee if you need more time before the window closes.
Yes, hardcopy books, notes and an index are permitted. Electronic references and internet access are prohibited, and hardcopy materials resembling practice or exam questions and answers are not allowed. Answers cannot be reviewed or changed after submission.
The certification is valid for four years. Renewal requires 36 approved CPE credits earned during the active cycle or successful re-examination, plus the applicable renewal fee. See the GAWN certification overview for more context on the credential lifecycle.