CCT INF FAQs

The table below summarises key differences between the two exams:

The new syllabus has been updated and restructured adding greater depth to the exam. 

The exam duration has been extensively assessed to ensure that the time allocated is appropriate to answer all questions.  

The CREST Certified Tester – Infrastructure (CCT INF) is an advanced level exam that assesses the candidate’s ability to find known vulnerabilities across common networks, applications, infrastructure and databases as well as containerisation, cloud, windows desktop lockdown and macOS. The CCT INF examination also covers a common set of core skills and knowledge. 

The CCT INF has two distinct parts: 

– A written exam  of two components: a multiple choice test and a written scenario 

– A practical exam 

The successful completion of this examination will confer CREST Certified Tester – Infrastructure status to the individual. 

Visit our CCT INF page for more information.

The new CCT INF exam is available in selected Pearson VUE Test Centres across the globe. You can book your online exam now via the Pearson VUE website. 

You can claim your promo code, available for a limited time, on this page.

Promo code expires on the 30 May 2024. Please make sure you have booked your exam by then. You must sit your exam by 30 October 2024. 

Please see the following Pearson VUE link and select the correct region for Pearson VUE’s customer support.

You can find some helpful resources in the ‘Exam Preparation’ section on our CCT INF page. This includes sample questions and scenarios as well as more information around the exam structure. 

A virtual machine will be made available so candidates can familiarise themselves with the tooling available in the practical exam environment. The virtual machine will host a version of Kali Linux that can be used to perform all required tasks within the exam. 

All current CCT certifications will be valid until their expiry date. 

The CCT exams have been approved by the National Cyber Security Centre (NCSC) for CHECK Team Leader (UK only).  

CHECK is a UK Government programme under the NCSC which approves cyber security service providers to carry out authorised penetration tests of public sector and critical national infrastructure (CNI) systems and networks. 

Candidates will be expected to find known vulnerabilities across common networks, applications, infrastructure and databases as well as new syllabus areas which include Containerisation, Desktop Lockdown, Cloud Security and macOS Security Assessment. CCT INF validates a practitioner’s ability to conduct vulnerability scans using commonly available tools and to interpret the results.  

The CCT INF syllabus provides detailed information on the exam topic areas.

Successful CCT INF candidates will be able to demonstrate that they are qualified for Pen Test roles (indicative of 5-6+ years of experience). 

Written exam

The written exam is closed book. Therefore, no books, written notes, internet access or other electronic devices will be allowed. This applies to both components of the written exam: the multiple choice test and the written scenario. 

Practical exam

Candidates are able to pre upload files ahead of their practical exam. These files will be accessible on the day of the exam. 

More details on the size and types of files allowed as well as on how to upload them will be provided once the booking window for the practical exam is open. 

If you have booked the hotel-based CCT INF practical exam, only available until May 2024, please refer to the appropriate syllabus.

Candidates who are planning to take the new CCT exam should refer to the new syllabus.

The syllabuses are different, and candidates must ensure they are using the correct version to prepare for their exam. 

Yes. It remains valid for 3 years from the date you sat the exam. 

CREST Training Partners are in the process of updating their course material and will be added to the training webpage when ready. Lab based training is also available. 

The quality and credibility of CREST exams depends on maintaining their integrity and security. We use various methods and tools to regularly scan the web for sites that claim to offer our exam materials and as a member of the CREST community, you play a vital role in helping us protect our exam content, their value, and in turn, your certifications.

If you have any doubts about the legitimacy of a resource, or have any information about fraudulent behaviour or misconduct, please report in confidence using our exam security reporting form. Alternatively, you can email us at [email protected].

The new CCT INF exam is available in selected Pearson VUE Test Centres across the globe. Book your exam online now via the Pearson VUE website.   

Written exam

The written exam duration is 3 hours in total, split as follows: 

– Multiple choice test (1 hour) 

– Written scenario (2 hours)  

Candidates will be given an additional 15 minutes for reading time prior to the start of written scenario component.  

Candidates must start with the multiple-choice test followed by the written scenario component. The questions can be answered in any order within each component. 

Practical exam

The practical exam duration is 3 hours and candidates will be given an additional 15 minutes for reading time prior to the start of the exam. 

The new CCT INF exam is made of two parts as follows: 

– A written exam which is made of two components: a multiple choice test and a written scenario 

– A practical exam  

The multiple choice component tests a candidates’ knowledge of the subject and the scenario assesses a candidates’ ability to assess risk and report writing skills.  

The CCT INF examination tests candidates’ knowledge and expertise in assessing operating systems, common network services and general network infrastructure security as well as Linux, cloud, databases and other web technologies. It also covers a common set of core skills and knowledge.  

Previously, candidates had to take and pass the written exam before being able to take the practical exam. In the new exam, candidates may take the exams in any order. 

Written exam 

Candidates will receive their multiple choice test results at the end of the exam with a breakdown on the areas and on how they have performed. 

The results for the written scenario component and overall result of their written exam will be provided within 20 days from when the exam has been taken. 

Practical exam 

More details will be provided once the booking window for the practical exam is open. 

No. In the new CCT INF exam, candidates can book their written and practical exams in whichever order they prefer. 

Candidates must contact the CREST support team at least 2 weeks before the potential exam date with a formal medical report from a qualified medical practitioner in the particular condition. Candidates should register an account with Pearson VUE but not book an exam date until the accommodation request has been processed. For more information, please contact [email protected]

You will be required to sign both when booking the CCT INF exam at Pearson VUE. 

Electronic items such as mobile phones, smart watches, ear buds etc will not be permitted to be taken into the exam. You will be required to surrender all electronic items and potentially other personal items. Lockers will be provided. Pearson VUE Comfort Aid List  

For more information about exam notes please review our ‘Notes for Candidates’ section on the new CCT INF page.

Yes. You can only book the CREST CCT INF exam through a Pearson VUE account. Please follow the link to set up an account if you have not already done so: Pearson VUE.

If you do run out of time, or forget to save, then your exam will be auto submitted. 

You will be provided with a 5-minute warning notification.

You need to bring two forms of government issued IDs one of which must have a picture. Most candidates bring their passport and the driver’s licence. No photocopies will be accepted. Please see the following link for more detailed information: English (pearsonvue.com) 

Pearson VUE provides relevant information for candidates via their resource hub: helpful resources for test-takers

You will need to arrive at least 15 minutes before your exam starts to allow time to complete the sign in process. 

Don’t forget to bring your two forms of government issued IDs.  

Access to the Kali virtual machine desktop will be provided via the Pearson VUE secure browser.  

You need to use this Kali virtual machines to perform the required testing. All required tooling is pre-installed into this virtual machine. 

The virtual machine has no access to the internet; therefore, you won’t be able to update, download any tools, download notes, search blogs etc.  

It might take 30-60 seconds to load the virtual machine into the Pearson VUE secure browser and this is perfectly normal.  

You won’t be able to copy and paste between the Kali virtual machine and the examination answer window. 

The UK hotel-based CCT practical exams will only be available until April 2024.

For more information, please visit our dedicated page.