What Is GAWN?

What GAWN Actually Is

GAWN stands for GIAC Assessing and Auditing Wireless Networks. It is a vendor-neutral, practitioner-oriented certification from GIAC that validates your ability to assess, attack and defend wireless technologies. The scope reaches well past home Wi-Fi: the published objectives cover 802.11 weaknesses, Bluetooth and Bluetooth Low Energy, RFID at both high and low frequency, NFC and software-defined radio work.

If you have seen the acronym elsewhere, be careful. Several unrelated credentials and terms share the same four letters. This site and this article concern only the GIAC wireless assessment certification. If you want other angles on the name itself, see our short explainers on what GAWN stands for and the meaning of GAWN.

Who Issues It and What the Exam Looks Like

GIAC Certifications, previously known as Global Information Assurance Certification, issues and administers the credential. The exam is a single web-based, proctored assessment with these published parameters:

The "no changes after submission" rule deserves attention. Because you cannot return to a question once you have answered it, your pacing and your confidence calibration matter more than they would on an exam with a review screen. Two hours for 75 questions is workable, but only if your reference materials are organized well enough that you are not hunting for a half-remembered tool flag at minute 90. For a deeper look at the passing threshold, read our guide to the GAWN passing score.

The 16 Objective Headings, Grouped by Theme

GIAC's credential page lists 16 examination-objective headings. Importantly, it does not publish percentage allocations for them. Any site that tells you a specific domain makes up a fixed share of the exam is guessing. The headings below are reproduced in their published order, then grouped here by theme so the breadth feels manageable. A full walkthrough lives in our GAWN exam domains guide.

Notice how much of the list sits outside traditional Wi-Fi. Candidates who prepare only on aircrack-style workflows tend to be surprised by how many headings involve RFID, NFC and Bluetooth. If you are gauging your readiness, our article on how hard the GAWN exam is discusses where candidates typically feel exposed.

Format Questions: CyberLive, Zigbee and What Is Actually Published

You may encounter conflicting information about the exam's format and scope, so it helps to be precise about what is and is not established.

• GIAC's 2026 catalog displays a CyberLive badge alongside GAWN and mentions Zigbee in marketing text.
• The credential page itself does not specify the composition of practical items and does not list a separate Zigbee objective heading.

Studying Zigbee as a general wireless topic is not wasted effort for a wireless professional, but it should not displace time from the 16 published headings.

Fees, Registration and Delivery Mechanics

GIAC prices are listed in US dollars, exclusive of applicable sales tax. Training is purchased separately.

Two practical points follow from this table. First, the 120-day activation window is a real constraint: if you activate your attempt before your study is mature, you may end up paying the $479 extension. Second, because retakes are $899 rather than free, an honest self-assessment before you sit the exam has direct financial value. For the complete cost picture, including how training changes the total, see our GAWN certification cost breakdown and our scheduling-focused piece on GAWN exam dates and deadlines.

On delivery, you may test remotely through ProctorU or onsite through Pearson VUE, depending on the options authorized for your individual attempt. Remote proctoring brings its own environment requirements, so verify the technical and room rules well before exam day.

Open-Book Rules and Why They Matter

GAWN is open book, but only in a specific sense. You may bring hardcopy books, notes and an index. Electronic references and internet access are prohibited. Hardcopy materials that resemble practice or exam questions and answers are also prohibited.

Open book does not mean easy. With 75 questions in two hours, you have under two minutes per question on average, which leaves no time to learn a concept from your notes. The index is a retrieval aid for things you already understand. Our GAWN cheat sheet is a good starting point for deciding what belongs in your index.

Who Benefits From the Credential

GAWN fits professionals whose work touches wireless risk. Typical audiences include:

• Penetration testers who are asked to assess Wi-Fi, Bluetooth or physical-access technologies as part of an engagement
• Red team operators who use proximity and radio techniques to bypass perimeter assumptions
• Security auditors and assessors evaluating wireless deployments against policy
• Network and security engineers responsible for enterprise wireless design and monitoring
• Blue team and incident response staff who need to understand attacker tradecraft in order to detect it

Consultancies, managed security providers and enterprise security teams are the most natural employers of people with this skill set. The credential signals that you have breadth across wireless technologies, not just one tool. We discuss earnings and demand without inventing figures in our GAWN salary guide, and the career-return question is covered in is the GAWN certification worth it. Job-market specifics are collected in our GAWN jobs overview.

How SANS SEC617 Fits In

SANS offers SEC617, Wireless Penetration Testing and Ethical Hacking, as affiliated training. It is the course most often associated with GAWN preparation. Several clarifications keep expectations realistic:

• Training is optional. GIAC requires no formal prerequisites, and SEC617 course prerequisites are not exam eligibility requirements.
• Preparation can also come from practical experience, college coursework or independent study.
• The public course curriculum is useful as a source of preparation topics, but it does not establish exhaustive exam coverage or an official count of exam domains.
• Course labs and the final-day capture-the-flag exercise do not tell you what practical-item composition the GAWN exam uses.

In other words, treat the course as a strong learning vehicle, and treat the GIAC objective list as the definition of what you are accountable for. Our overview of GAWN training options compares the paths, and GAWN requirements covers eligibility in detail.

Sequencing Your Preparation Around the Objectives

Rather than a generic schedule, order your study by dependency. Later topics assume the vocabulary and capture skills from earlier ones. Here is one logical sequence tied directly to the published headings; adjust the duration to your own background and your 120-day window.

The reasoning is simple: sniffing and encryption knowledge pays off in nearly every later topic, while SDR and air-gap material tends to feel abstract until you understand the underlying signals and protocols. For a broader approach to turning this into a plan, see our GAWN study guide, and use the GAWN practice tests to check your recall under time pressure.

Validity and Renewal

A GAWN certification is valid for four years. To renew, you need 36 approved continuing professional education credits earned during the active cycle, or you may pass the exam again, in either case paying the applicable renewal fee ($499 at the standard rate). Because the credit requirement is tied to the active cycle, it pays to log relevant activity as you go rather than hunting for it in year four.

If you are still deciding whether to commit, remember that the pass criteria and attempt rules are well defined, while published success statistics are not something this site will invent. Our discussion of the GAWN pass rate explains what can and cannot be said responsibly. When you are ready to measure your knowledge, you can try the practice test platform built around the published objective headings.

Frequently Asked Questions