- Why GDAT Has No Fixed Exam Calendar
- The 120-Day Activation Window Explained
- Registration Mechanics and Cost Timing
- Pearson VUE Onsite vs. ProctorU Remote
- Choosing Your Date Around the 10 Domains
- A Domain-Driven Scheduling Timeline
- Exam-Day Rules That Affect Your Booking
- Retakes, Renewal Cycles, and Long-Range Planning
- Frequently Asked Questions
- GIAC Defending Advanced Threats is delivered as one proctored web-based exam: 75 questions, 2 hours, 70% minimum passing score.
- A standalone attempt gives you 120 days of access from activation, so your real deadline starts when you activate.
- Testing runs through Pearson VUE onsite or ProctorU remotely, subject to GIAC modality rules.
- A standalone attempt costs USD 999; a retake is USD 899; the optional practice exam is USD 399.
Why GDAT Has No Fixed Exam Calendar
Candidates searching for "GDAT exam dates 2026" often expect a list of national sitting days, like a university entrance test. GIAC Defending Advanced Threats does not work that way. It is administered by GIAC Certifications as a proctored, web-based exam, and you schedule it inside an access window tied to your attempt rather than waiting for a published seasonal session.
That makes "exam dates" a planning problem you control. The real questions are when your attempt activates, how many days remain on it, which proctoring modality you choose, and whether your preparation lines up with the date you pick. This guide walks through each of those decisions with the facts that GIAC publicly documents.
If you are still orienting yourself on what the credential covers, start with What Is GDAT Certification? and then return here to plan the calendar side.
The 120-Day Activation Window Explained
For a standalone attempt, GIAC grants 120 days of access from activation. This is the single most important date-related fact for GDAT planning, because it replaces the idea of a fixed test day with a rolling deadline you start yourself.
What the window means in practice
- The clock starts at activation, not purchase. Buying an attempt and activating it are separate steps, so you can buy early without burning study time.
- You must test inside the window. Treat day 120 as a hard stop, and plan to sit the exam well before it so a scheduling problem does not cost you the attempt.
- Proctor availability is the pinch point. Onsite seats and remote slots are finite, so leaving booking to the final weeks adds avoidable risk.
Activation timing strategy
Activate when you are roughly ready to begin focused, domain-by-domain review, not when you first feel motivated. A candidate who activates too early may spend weeks of the window on foundations. A candidate who activates too late has little room to reschedule. The sweet spot is activating once your reference materials are organized and your first study block is ready to begin.
Registration Mechanics and Cost Timing
Scheduling and budgeting are linked, because each path to an exam date carries a different cost structure. The published figures from GIAC's pricing information are straightforward, and none include sales tax or training tuition.
| Item | Price (USD) | Scheduling Relevance |
|---|---|---|
| Standalone exam attempt | 999 | 120 days of access from activation |
| SANS-associated exam attempt | 999 | Course tuition is additional |
| Retake | 899 | Requires a fresh attempt and a new booking |
| Practice exam (separately listed) | 399 | Use it to validate a date before you commit to it |
| Standard renewal | 499 | Due on the four-year cycle |
The practice exam matters for timing more than most candidates realize. Taking it a few weeks before your planned test date gives you evidence on whether to keep that date or push it. For the full financial picture, see the GDAT certification cost breakdown.
Prerequisites do not gate the calendar
There are no formal prerequisites for GDAT, and training is recommended rather than required. That means no external approval step delays your booking. Eligibility details are covered in GDAT requirements and how to qualify.
Pearson VUE Onsite vs. ProctorU Remote
GDAT is delivered through Pearson VUE (onsite) or ProctorU (remote), subject to GIAC modality rules. Your choice changes how flexible your date can be.
| Factor | Pearson VUE Onsite | ProctorU Remote |
|---|---|---|
| Location | Testing center | Your own approved workspace |
| Scheduling pressure | Depends on local seat availability | Depends on remote proctor slots |
| Travel time to budget | Yes | None |
| Environment control | Provided by the center | You must meet room and equipment rules |
| Best for | Candidates wanting a controlled setting | Candidates wanting schedule flexibility |
Choosing between them
Remote testing generally offers more flexibility, but it asks you to guarantee a quiet, compliant room for the full two hours. Onsite testing removes technical risk but adds travel. Because the exam is open book, also think about how you will arrange your hardcopy materials in either setting before you pick.
Key Takeaway
Decide your modality before you decide your date. The right date depends on which proctoring channel you can reliably access, and GIAC's modality rules should be checked in your account at booking time.
Choosing Your Date Around the 10 Domains
Because there is no fixed calendar, the best exam date is the one your preparation can support. GDAT's published objectives span ten areas, and the public outline lists them without percentage weights, so do not assume any one domain is weighted more than another when you plan.
The ten domains are Active Directory/Domains, Administrative Access, Adversary Emulation, Application Exploitation, Data Exfiltration, Installation, Lateral Movement, Payload Delivery, Payload Execution, and Reconnaissance, Threat Handling, and Incident Response. A full walkthrough lives in the GDAT exam domains guide.
Why the domain mix shapes your timeline
The domains read like an attack chain from the defender's perspective, so they build on one another. That has scheduling consequences.
- Active Directory/Domains and Administrative Access underpin several later topics, so they deserve early attention.
- Payload Delivery, Payload Execution, and Installation form a connected sequence best studied together.
- Lateral Movement and Data Exfiltration are easier once the earlier stages are solid.
- Reconnaissance, Threat Handling, and Incident Response ties detection and response together, and its outcome statement discusses threat hunting.
If you are gauging readiness before locking a date, the GDAT difficulty guide and the pass rate analysis explain what is and is not publicly known. No issuer-published pass rate has been verified, so beware of any source quoting one with confidence.
A Domain-Driven Scheduling Timeline
This is the one structured study section in the article, and it is tied directly to GDAT's domains rather than to generic habits. Adjust the length to your background, and slot your exam date at the end of whichever block you complete. For deeper study sequencing, the GDAT study guide expands each stage.
Foundations: Active Directory/Domains and Administrative Access
- Review how domain authentication and privilege structures work, since later domains assume this knowledge.
- Activate your attempt only if you are ready to use the 120 days productively.
- Begin building your open-book index as you go.
The Delivery Chain: Payload Delivery, Payload Execution, Installation
- Study these three as one connected sequence.
- Note which defensive controls interrupt each stage.
- Add index entries for each stage's key concepts.
Movement and Impact: Lateral Movement, Data Exfiltration, Application Exploitation
- Connect how an adversary progresses after initial access.
- Focus on detection and prevention angles at each step.
Response and Emulation: Adversary Emulation, Reconnaissance, Threat Handling, and Incident Response
- Tie emulation exercises back to the controls you studied earlier.
- Review threat hunting concepts from the outcome statement.
- Take the practice exam to decide whether your date holds.
Candidates with strong blue-team or purple-team experience may compress this considerably, while those new to adversary tradecraft may stretch each block. The point is to let domain readiness, not the calendar, drive your booking. Practice questions at our main practice test site can help you check each block before you move on.
Exam-Day Rules That Affect Your Booking
Several exam-day rules should influence when and how you schedule, because they affect your preparation timeline.
Open book, with limits
GDAT is open book. Permitted resources are hardcopy books, notes, and an index. Electronic references and practice or exam question-and-answer materials are prohibited. Because your index is physical, build it before your booking date rather than the night before. A well-organized index is a real advantage in a 75-question, 2-hour exam, which leaves limited time per question.
Format and scoring
- Questions: 75 total.
- Time: 2 hours.
- Minimum passing score: 70%.
The 70% figure is a minimum passing score, not a candidate pass rate. GIAC applies this specification to exam versions released on or after October 1, 2018, and that date marks a scoring applicability point, not a current syllabus revision. Your assigned exam version was not publicly specified, so confirm attempt-specific details in your account. For more on scoring, read GDAT passing score explained.
Candidate agreement and proctor rules
GIAC's Candidate Agreement, the Proctored Exam Reference Guide, and the Certification Attempt Delivery Policy govern conduct, identification, and delivery. Read them before booking so a rule you overlooked does not derail a date you have already committed to. The Candidate Agreement was updated February 18, 2025, and the Attempt Delivery Policy was updated May 20, 2025, so rely on the current versions published by GIAC rather than older summaries.
Retakes, Renewal Cycles, and Long-Range Planning
If your first date does not go to plan
A retake costs USD 899 and requires a new attempt, so a missed pass means a new booking and a new budget line. Build a buffer into your first plan so that, if needed, there is time to schedule again without panic. Do not treat the 120-day window as a reason to rush; treat it as a ceiling that protects you from drifting.
The four-year renewal clock
Once you pass, certification is valid for four years. Renewal requires either 36 CPE credits or a renewal examination, plus the USD 499 renewal fee. Treat the four-year mark as a second "exam date" worth putting on your calendar the day you earn the credential. Accruing CPE credits gradually is far easier than scrambling near the deadline. GIAC's renewal how-to guide and knowledge-base pages detail the process.
| Milestone | What Happens | Planning Note |
|---|---|---|
| Activation | 120-day access window begins | Activate when ready to study seriously |
| Exam day | 75 questions, 2 hours, 70% to pass | Book well before day 120 |
| Certification granted | Valid four years | Start tracking CPE credits |
| Renewal | 36 CPE credits or renewal exam, plus USD 499 | Plan early to avoid lapse |
Is the timing worth it?
Every date decision connects back to value. If you are weighing whether to commit to a date at all, the GDAT ROI analysis and the salary guide help frame the payoff, while GDAT jobs covers who hires for this skill set.
Key Takeaway
Think of GDAT dates as a sequence you design: activate, study by domain, validate with the practice exam, book early inside the 120 days, then calendar your four-year renewal. The only truly fixed dates are the ones you set.
Frequently Asked Questions
No fixed national exam calendar is published for GIAC Defending Advanced Threats. You activate an attempt and schedule within its access window through Pearson VUE onsite or ProctorU remotely, subject to GIAC modality rules.
A standalone attempt provides 120 days of access from activation. Confirm your own attempt's terms in your GIAC candidate account, especially if your attempt is associated with SANS training.
One proctored web-based exam with 75 questions in 2 hours and a minimum passing score of 70%. Your candidate account is the authority for attempt-specific format and scoring details.
A retake is USD 899, compared with USD 999 for a standalone attempt. Prices exclude applicable sales tax and training tuition, and a practice exam is separately listed at USD 399.
Certification is valid for four years. Renew with 36 CPE credits or a renewal examination, plus the USD 499 renewal fee. See our exam dates overview and GIAC's renewal pages for current steps.