- GAWN is GIAC Assessing and Auditing Wireless Networks, a wireless security credential issued by GIAC Certifications.
- The exam is 75 questions in two hours, with a 70% minimum passing score.
- GIAC publishes 16 objective headings but no percentage weights, so study every area rather than guessing at emphasis.
- Hardcopy books, notes, and an index are allowed; electronic references and internet access are not.
What Is GAWN Certification? A Plain-English Overview
- What GAWN Actually Certifies
- Who Issues It and How the Exam Works
- The 16 Objective Areas
- Topics You Must Be Able to Reason About
- Registration, Fees, and the 120-Day Window
- Open-Book Rules and How to Build an Index
- Who Benefits From the Credential
- Four-Year Validity and Renewal
- Sequencing Your Preparation
- Frequently Asked Questions
Key Takeaways
- GAWN is GIAC Assessing and Auditing Wireless Networks, a wireless security credential issued by GIAC Certifications.
- The exam is 75 questions in two hours, with a 70% minimum passing score.
- GIAC publishes 16 objective headings but no percentage weights, so study every area rather than guessing at emphasis.
- Hardcopy books, notes, and an index are allowed; electronic references and internet access are not.
- The certification lasts four years and renews with 36 CPE credits or a successful re-exam.
What GAWN Actually Certifies
GAWN stands for GIAC Assessing and Auditing Wireless Networks. It is a vendor-neutral credential that tests whether a security practitioner can evaluate, attack, and defend the wireless technologies that surround modern organizations. That scope reaches well beyond a single Wi-Fi access point. The published objectives cover 802.11 networks, Bluetooth and Bluetooth Low Energy, RFID at both low and high frequencies, NFC, software-defined radio, and the techniques used to bridge into networks that are supposed to be isolated.
If you have seen the acronym elsewhere, note that several unrelated credentials share it. This article is only about the GIAC wireless assessment certification. For a shorter definitional take, see What Does GAWN Stand For? and What Is GAWN?.
Who Issues It and How the Exam Works
GAWN is issued by GIAC Certifications, previously known as Global Information Assurance Certification. GIAC certifications are examination-based: you earn the credential by passing a proctored exam rather than by completing a course. The training pathway most associated with this credential is the SANS course SEC617, Wireless Penetration Testing and Ethical Hacking, but the course is optional preparation and not an eligibility requirement.
| Exam Element | GAWN Detail |
|---|---|
| Issuer | GIAC Certifications |
| Number of exams | One web-based proctored exam |
| Questions | 75 |
| Time limit | Two hours |
| Minimum passing score | 70% |
| Delivery | Remote via ProctorU or onsite via Pearson VUE, per the options authorized for your attempt |
| Reference materials | Hardcopy books, notes, and an index only |
| Answer review | Submitted answers cannot be reviewed or changed |
That last row deserves attention. Because you cannot go back, pacing is a practical skill. At 75 questions in 120 minutes you have a little over a minute and a half per question on average, which is comfortable only if you can locate your reference material quickly. For a deeper look at the numeric threshold, read GAWN Passing Score 2026.
A Note on Question Format
GIAC's credential page does not itemize the composition of practical items. GIAC marketing material in its 2026 catalog displays a CyberLive badge for GAWN, which signals hands-on elements, but the credential page itself does not specify a lab-item count or confirm a multiple-choice-only format. The safest approach is to treat the Certification Information and objective list tied to your own purchased attempt as the authority on question types, and to prepare for both conceptual and applied questions.
The 16 Objective Areas
GIAC lists 16 objective headings for GAWN. The page does not publish percentage allocations, so no area can honestly be called the heaviest. The headings, in published order, are:
- 802.11 Fuzzing Attacks
- Attacking Weak Encryption
- Bluetooth Attacks
- Bluetooth Low Energy Attacks
- Bridging the Air Gap
- DoS on Wireless Networks
- High-Frequency RFID Attacks
- Hotspots
- Low-Frequency RFID Attacks
- NFC
- Practical SDR Attacks
- Rogue Networks
- Sniffing Wireless
- Wireless Basics
- Wireless Client Attacks
- WPA Variants
Notice the breadth. Only a handful of these headings concern traditional Wi-Fi. The rest span short-range radio, proximity cards, and software-defined radio. A candidate who has only ever tested Wi-Fi networks will find large parts of this list unfamiliar. For a heading-by-heading walkthrough, see GAWN Exam Domains 2026: Complete Guide to All 16 Content Areas.
Topics You Must Be Able to Reason About
The objective names are short, so here is what each cluster means in practice. Treat these as study orientation rather than an exhaustive syllabus, since GIAC does not publish a sub-topic breakdown on the credential page.
802.11 Foundations and Encryption
This cluster covers Wireless Basics, Attacking Weak Encryption, WPA Variants, and Sniffing Wireless.
- Understand frame types, channels, and how passive capture works, since most later attacks build on it.
- Know why legacy encryption fails and how WPA personal and enterprise variants differ in their weaknesses.
- Be ready to interpret captured traffic and explain what an observer can and cannot learn.
Attacks on Infrastructure and Clients
This cluster covers Rogue Networks, Hotspots, Wireless Client Attacks, DoS on Wireless Networks, and 802.11 Fuzzing Attacks.
- Distinguish attacks that target the access point from attacks that target the connecting device.
- Explain how rogue and evil-twin style networks lure clients, and how captive-portal hotspots can be abused.
- Reason about denial-of-service conditions at the radio and management-frame level, and how to detect them.
- Understand fuzzing as a way to discover implementation flaws in wireless stacks.
Short-Range and Proximity Technologies
This cluster covers Bluetooth Attacks, Bluetooth Low Energy Attacks, NFC, High-Frequency RFID Attacks, and Low-Frequency RFID Attacks.
- Know how classic Bluetooth and Bluetooth Low Energy differ in pairing, discovery, and attack surface.
- Separate low-frequency and high-frequency RFID by operating characteristics and typical weaknesses of access-control cards.
- Understand NFC as a related proximity technology with its own risks around reading, relaying, and emulation.
Advanced Radio and Isolation Bypass
This cluster covers Practical SDR Attacks and Bridging the Air Gap.
- Understand what software-defined radio lets an assessor receive, analyze, and transmit beyond commodity Wi-Fi hardware.
- Be prepared to reason about how isolated or air-gapped environments can still be reached through wireless channels.
For a structured plan that maps these clusters onto a calendar, see the GAWN Study Guide 2026, and for a quick-reference format, the GAWN Cheat Sheet 2026.
Registration, Fees, and the 120-Day Window
GIAC requires no formal prerequisites to begin a GAWN attempt. SANS SEC617 has its own course prerequisites, but those are not exam eligibility requirements. Preparation can come from practical experience, college coursework, independent study, or the optional SANS course. The details are covered in GAWN Requirements 2026.
Once your attempt is activated, you have 120 days to complete it. The current standard USD fees, excluding applicable sales tax, are:
| Item | Standard Fee (USD) |
|---|---|
| Certification attempt | $999 |
| Retake | $899 |
| Practice examination | $399 |
| Attempt extension | $479 |
| Renewal | $499 |
Training is priced separately from the certification attempt. The extension fee matters if your preparation runs long, so it is worth planning your timeline before activation rather than after. A full breakdown, including how these costs compare to training, is in GAWN Certification Cost 2026, and scheduling mechanics are in GAWN Exam Dates 2026.
Key Takeaway
Start your 120-day clock only when your reference index is built and you have completed a timed practice run. Activating early and then paying the extension fee is an avoidable cost.
Open-Book Rules and How to Build an Index
The GAWN exam is open book in a specific, limited sense. You may bring hardcopy books, notes, and an index. You may not use electronic references or internet access, and hardcopy materials that resemble practice or exam questions and answers are prohibited. In other words, your notes must be your own organized study material, not a collection of recalled or copied questions.
An index is only useful if it is built from your own learning. A strong GAWN index is organized by the 16 objective headings and then by technique, tool behavior, and protocol term. When you study a topic like Bluetooth Low Energy pairing or WPA variant differences, record the term, a one-line meaning, and the book and page where you found it. Build it while you study, not the week before the exam.
Who Benefits From the Credential
The GAWN credential is most relevant to practitioners whose work touches wireless risk. Typical audiences include penetration testers, red team members, security auditors, network and wireless engineers moving into security, and defenders responsible for monitoring wireless environments. Organizations with physical access control, large campuses, retail or healthcare footprints, and sensitive isolated networks tend to care about wireless assessment skills most.
Job postings vary widely, and this article does not claim specific salary figures. For employment-oriented context, see GAWN Jobs, GAWN Salary Guide 2026, and Is the GAWN Certification Worth It?, which weigh the investment against career goals. Because the credential costs $999 for an attempt before any training, it makes the most sense when your employer sponsors it or your role directly uses these skills.
Four-Year Validity and Renewal
A GAWN certification is valid for four years. To renew, you need 36 approved continuing professional education (CPE) credits earned during your active cycle, or you can pass the exam again, plus the applicable renewal fee. Because wireless technology changes quickly, the renewal requirement acts as a built-in prompt to stay current. Keep records of qualifying activities as you go, since collecting 36 credits at the last minute is difficult.
Sequencing Your Preparation
Rather than a generic schedule, order your study around dependency. Foundations first, then attacks that build on them, then the specialized radio topics that most candidates find least familiar. A sample sequence follows.
Foundations
- Wireless Basics and Sniffing Wireless, because every later topic assumes you can read captured traffic.
- Begin your index with core terminology.
Encryption and Authentication
- Attacking Weak Encryption and WPA Variants.
- Record how each variant fails and what an assessor would test.
Network and Client Attacks
- Rogue Networks, Hotspots, Wireless Client Attacks, DoS on Wireless Networks, and 802.11 Fuzzing Attacks.
Short-Range and Proximity
- Bluetooth, Bluetooth Low Energy, NFC, and both RFID frequency bands.
SDR, Air Gaps, and Timed Review
- Practical SDR Attacks and Bridging the Air Gap.
- Finish with timed practice at 75 questions in two hours using your finished index.
If you are unsure how demanding this will feel, How Hard Is the GAWN Exam? discusses difficulty factors, and GAWN Pass Rate 2026 explains what is and is not publicly known about outcomes. When you are ready to test yourself, the GAWN practice tests offer original questions built around the published objective headings.
Frequently Asked Questions
It stands for GIAC Assessing and Auditing Wireless Networks, a credential issued by GIAC Certifications that validates skills in assessing and attacking wireless technologies. More background is in What Is GAWN Certification? and GAWN Meaning.
The exam has 75 questions with a two-hour limit and requires a 70% minimum passing score. It is a single web-based proctored exam, delivered remotely through ProctorU or onsite through Pearson VUE depending on what is authorized for your attempt.
No. GIAC requires no formal prerequisites to begin an attempt. SANS SEC617 is optional preparation, and its own course prerequisites are not exam eligibility requirements. See GAWN Training for preparation options.
Yes, but only hardcopy books, notes, and an index. Electronic references and internet access are prohibited, as are hardcopy materials that resemble practice or exam questions and answers. You also cannot review or change answers after submitting them.
Four years. Renewal requires 36 approved CPE credits earned during the cycle or a successful re-examination, along with the $499 renewal fee at current standard pricing.