- CCITP-F has 110 multiple-choice questions: 100 scored, 10 unscored pilot items, per the March 2025 handbook.
- You get 130 minutes (2 hours, 10 minutes) to finish the exam.
- Passing requires 650 out of 800 scaled points - not a raw percentage.
- Researching (30%) and the joint Synthesis & Tools and Methods group (35%) together make up nearly two-thirds of the exam.
What the CCITP-F Exam Actually Tests
The Certified Counter-Insider Threat Professional - Fundamentals (CCITP-F) credential is governed by the CCITP Governance Council (CCITP GC), with conferral jointly authorized by the Under Secretary of Defense for Intelligence and Security (USD(I&S)) and the Director of the National Counterintelligence and Security Center (NCSC). That joint governance structure matters for how you should think about the exam: this isn't a generic vendor certification, it's a credential tied directly to how the U.S. counter-insider-threat (C-InT) community formally validates its workforce.
If you're still orienting yourself to the basics, our companion piece What Is CCITP-F? and the deeper explainer at What Is CCITP-F Certification? are worth reading before you commit to a study plan. This guide assumes you already know the "what" and want the "how to pass."
Who Can Even Sit for CCITP-F
Before you build a study calendar, confirm you qualify. CCITP-F is restricted to current counter-insider-threat program personnel or individuals affiliated with a C-InT program. Specifically, candidates need:
- At least six months of experience working in or with a C-InT program
- At least ten hours of related training
- Formal Program Manager approval before registering
This is not an open-entry exam anyone can register for on a whim. If you're unsure whether your current role or training hours qualify, work through the full breakdown in CCITP-F Requirements 2026: Eligibility, Prerequisites & How to Qualify before you invest time in a study plan - there's no point memorizing domain content if you can't register yet.
Key Takeaway
Get Program Manager sign-off and verify your ten training hours and six months of program experience first. Study time is wasted if your eligibility paperwork isn't in order.
Breaking Down the Four Weighted Domain Groups
The CCITP-F exam blueprint organizes content into five named topic areas that roll up into four weighted domain groups. Understanding the weighting is the single most important strategic decision you'll make in your prep, because it tells you exactly where to spend limited study hours.
Domain 1: Policy and Directives (25%)
Covers the governing policy framework behind C-InT programs - the directives, authorities, and oversight structures that shape how programs operate. Expect questions testing whether you understand why a policy exists, not just its title.
- Know the purpose and scope of core governing directives, not just their names
Domain 2: Social and Behavioral Science (10%)
The smallest weighted domain, but don't skip it. This area draws on behavioral indicators and the social-science underpinnings of insider threat detection - how human factors, stressors, and behavioral patterns are assessed within a program context.
- Focus on how behavioral indicators are interpreted within an analytic framework, not clinical psychology trivia
Domain 3: Researching (30%)
One of the two largest domains. This tests your ability to gather, validate, and apply information relevant to a C-InT investigation or assessment - research methodology as it's actually practiced in a program setting.
- Practice distinguishing credible, verifiable sourcing from unsupported assumptions
Domain 4: Synthesis & Tools and Methods (35%)
The heaviest single weighting on the exam, worth more than a third of your score. Note that the issuer does not publish a separate percentage split between "Synthesis" and "Tools and Methods" - they are tested as one joint 35% block. Don't try to guess an internal split; study both halves as equally essential.
- Expect scenario-style questions combining analytic synthesis with practical tool/method application
For a far more detailed walk-through of each domain's subtopics and sample question styles, see CCITP-F Exam Domains 2026: Complete Guide to All 4 Content Areas.
| Domain Group | Weight | Relative Priority |
|---|---|---|
| Policy and Directives | 25% | High |
| Social and Behavioral Science | 10% | Lower, but non-negotiable |
| Researching | 30% | Highest |
| Synthesis & Tools and Methods | 35% | Highest |
Question Format, Timing, and Scoring Standard
Per the current official CCITP Program Candidate Handbook (March 2025, page 6), the CCITP-F exam consists of 110 multiple-choice questions: 100 scored and 10 unscored pilot questions. Every question has exactly one correct answer - there are no multi-select or "choose all that apply" traps to prepare for. You won't know which 10 of the 110 questions are pilot items, so treat every question as if it counts.
You have 130 minutes (two hours and ten minutes) to complete the exam. That works out to roughly 70 seconds per question if you spend it evenly, though scenario-based items in the Researching and Synthesis & Tools and Methods domains will naturally eat more of your clock than straightforward Policy and Directives recall questions.
If scoring mechanics are the part that's still fuzzy, the dedicated breakdown at CCITP-F Passing Score 2026: Exactly What You Need to Pass walks through what the 650/800 scaled standard means in practice. And if you're trying to gauge overall difficulty rather than just the score cutoff, How Hard Is the CCITP-F Exam? Complete Difficulty Guide 2026 and CCITP-F Pass Rate 2026: What the Data Shows dig into that question directly.
Handbook Changes You Need to Know About
If you find older study material online, double-check its publication date. An earlier Spring 2024 (V1_8) handbook listed 115 total questions, including 15 pilot questions. That version has been superseded for the Fundamentals component by the current March 2025 handbook, which specifies 110 total questions - 100 scored and 10 pilot. If a prep resource cites 115 questions or 15 pilot items, it's working from outdated information.
| Handbook Version | Total Questions | Pilot Questions | Status |
|---|---|---|---|
| Spring 2024 (V1_8) | 115 | 15 | Superseded |
| March 2025 (current) | 110 | 10 | Current, governs exam |
Always verify details against the official CCITP Program Candidate Handbook before you finalize a study plan built around any third-party summary, including this one.
A Domain-Weighted Study Timeline
A generic weekly study template is only useful if it's mapped to CCITP-F's actual weighting. Since Researching (30%) and Synthesis & Tools and Methods (35%) together account for 65% of your scored questions, your calendar should reflect that imbalance rather than splitting time evenly across all four domain groups.
Policy and Directives + Program Orientation
- Review governing directives and the role of USD(I&S) and NCSC oversight
- Confirm your own eligibility paperwork and Program Manager approval are finalized
Social and Behavioral Science
- Cover this smaller domain early so it doesn't get crowded out later
- Focus on behavioral indicator interpretation within a program analytic context
Researching
- Drill sourcing credibility and research methodology scenarios
- Practice applying research steps to realistic C-InT fact patterns
Synthesis & Tools and Methods
- Spend the most total hours here - it's your single heaviest domain group
- Work scenario questions that combine analytic synthesis with tool/method selection
Full-Length Practice and Pacing
- Simulate the full 130-minute, 110-question format under timed conditions
- Run through a consolidated review using CCITP-F Cheat Sheet 2026: One-Page Review of Must-Know Facts
Use spaced repetition for the Policy and Directives terminology you front-loaded in Week 1 - a quick 10-minute review every few days keeps directive names and authorities fresh without dedicating new study blocks to them later. Timed full-length practice runs through our practice test platform in the final week are the best way to confirm your pacing actually holds up across all 110 questions, not just in isolated domain drills.
Mistakes That Sink First-Time Candidates
- Treating the joint 35% domain as two separate, smaller weights. No official split exists between Synthesis and Tools and Methods - under-preparing either half shortchanges a third of your score.
- Studying from outdated 115-question material. The current governing document is 110 questions (100 scored, 10 pilot); practicing against the wrong format skews your pacing expectations.
- Chasing a percentage instead of the scaled score. Passing is defined as 650 of 800 scaled points - don't calibrate your practice goals around an arbitrary percent-correct target.
- Registering before eligibility is locked in. Six months of C-InT experience, ten training hours, and Program Manager approval are prerequisites, not formalities.
- Neglecting the Social and Behavioral Science domain because it's only 10%. Every scored question matters toward the 650-point threshold.
Once you're certified, it's worth understanding how the credential actually gets used in hiring. Review CCITP-F Jobs and CCITP-F Salary Guide 2026: Complete Earnings Analysis to see how the credential fits into C-InT career paths, and if you're still weighing whether to pursue it at all, Is the CCITP-F Certification Worth It? Complete ROI Analysis 2026 lays out the tradeoffs. For structured coursework leading into the exam, CCITP-F Training and our full practice test library are both good next stops after you finish this guide.
Frequently Asked Questions
The current March 2025 handbook specifies 110 multiple-choice questions total: 100 scored and 10 unscored pilot questions. Each question has exactly one correct answer.
You're given 130 minutes, equivalent to two hours and ten minutes, to complete all 110 questions.
You need 650 out of 800 scaled points. This is a scaled score standard, not a raw percentage of correct answers, and a score report alone does not constitute final certification conferral.
Synthesis & Tools and Methods carries the heaviest single weighting at 35%, followed closely by Researching at 30%. Together they represent roughly two-thirds of the scored content.
Only if you have at least six months of experience working in or with a C-InT program, at least ten hours of related training, and formal Program Manager approval. It is not an open-entry exam.