- The GIAC Security Operations Certified (GSOC) minimum passing score is 67% for exam versions released on or after August 28, 2021.
- The exam has 75 questions and a 2-hour limit, so pacing matters as much as knowledge.
- GIAC publishes ten objective headings but no official weights, so do not trust sites quoting per-objective percentages.
- Paper books and notes are allowed; electronic references and practice-question materials are prohibited.
The Number: 67% on a 75-Question Exam
If you are searching for the GIAC Security Operations Certified (GSOC) passing score, here is the short answer: 67%. That threshold applies to exam versions released on or after August 28, 2021, and it is the figure GIAC publishes for this credential. The exam is a single web-based, proctored practitioner exam with 75 questions and a 2-hour time limit.
Throughout this article, "GSOC" means the GIAC credential, not Google Summer of Code and not a generic "global security operations center." That distinction matters when you search, because unrelated pages frequently surface for the same acronym. If you are still orienting yourself, start with What Is GSOC Certification? and come back here for the scoring details.
What 67% Means in Practice
Applied to a 75-question exam, 67% works out to roughly 51 correct answers (0.67 × 75 = 50.25, so 51 is the practical target if every question counts equally). Two cautions apply here:
- GIAC does not publish an item-type mix or a scored/unscored breakdown for GSOC in the sources we verified. If some questions are unscored, your effective margin may differ from the simple arithmetic above.
- Treat 51 as a planning target, not a guarantee. Aim well above it in practice so a handful of unfamiliar questions cannot sink you.
Note also that answers cannot be revised after submission, and a limited skip allowance applies. That means you should answer what you can, flag what you must skip, and keep an eye on the clock rather than trying to perfect every item. Our GSOC difficulty guide covers how the question style feels in more depth.
Passing Score vs. Pass Rate
These two terms get conflated constantly. They are different things:
| Term | What It Means | Is It Published for GSOC? |
|---|---|---|
| Passing score | The minimum percentage you must earn on your attempt to pass | Yes: 67% (versions released on or after August 28, 2021) |
| Pass rate | The share of all candidates who pass | No representative GSOC-specific figure was found |
Be skeptical of any site that gives you a confident GSOC pass rate. We did not find a verified population pass rate, and statistics attached to Google's unrelated open-source program have nothing to do with this certification. For a careful look at what can and cannot be said, see GSOC Pass Rate 2026: What the Data Shows.
Ten Objectives, No Published Weights
GIAC lists ten exam-objective headings for GSOC. Crucially, no official percentage weights, highest-weight objective, or per-objective question counts were published in the sources we retrieved. Some third-party pages claim fixed question counts per objective or assign percentage ranges to renamed areas; those claims do not match GIAC's unweighted list and should not drive your study plan.
The ten headings are:
- Analytic Design and Tuning
- Blue Team Defense Concepts
- Endpoint Defense
- HTTP(S) Analysis and Attacks
- Interpreting Events
- Intrusion Triage and Analysis
- Network Traffic Analysis
- Operational Improvement
- Protocol Attacks and Analysis
- SOC Management Systems
Because every objective could plausibly appear and because weights are unknown, the safest approach is breadth first, then depth where your own practice results show weakness. The full breakdown lives in GSOC Exam Domains 2026: Complete Guide to All 10 Content Areas.
Where the Score Is Won: Evidence Interpretation
Several objectives reward the ability to read raw evidence and reach a conclusion quickly.
- Network Traffic Analysis and Protocol Attacks and Analysis: know protocol mechanics well enough to spot anomalies in packet captures and recognize filter syntax.
- HTTP(S) Analysis and Attacks: be able to read web requests and responses and identify attack indicators.
- Interpreting Events and Intrusion Triage and Analysis: practice reading Windows and Linux log evidence and deciding what is benign, suspicious, or malicious.
Where the Score Is Won: Process and Tooling
The remaining objectives test how a SOC actually runs and improves.
- Analytic Design and Tuning: understand how detections are built and refined to cut noise.
- Blue Team Defense Concepts and Endpoint Defense: know defensive fundamentals and endpoint-level controls and telemetry.
- Operational Improvement and SOC Management Systems: be comfortable with the platforms and workflows that keep a SOC effective over time.
SANS groups these ten headings into five practical preparation areas for its affiliated SEC450 course. Those groupings are a teaching convenience, not a different exam structure. Likewise, AI and agentic-workflow content in current SEC450 training is preparation curriculum; it does not create a new GIAC objective or a separately versioned 2026 exam.
Exam Format and Rules That Affect Your Score
Your raw knowledge is only half the equation. The rules of the testing environment shape how you earn those 51-plus correct answers.
Open-book, but paper only
Paper books, notes, and your index are permitted. Electronic and internet resources are prohibited, as are exam and practice-question references. This is why a well-built index is a genuine scoring tool: the faster you can locate a protocol detail, command switch, or log field, the more time you preserve for harder items. Our GSOC study guide and one-page cheat sheet outline what is worth capturing.
Time and breaks
Two hours for 75 questions averages out to under two minutes per question. A 15-minute break allowance applies, and you should plan when you would use it rather than deciding mid-exam. Check the certification-information page for your purchased attempt, which GIAC treats as the authority for that attempt's specifications.
Proctoring modality
The exam is delivered through Pearson VUE (onsite) or ProctorU (remote), subject to attempt-specific modality restrictions. Whether a calculator is available or the exam adapts is unverified for this exact exam, so do not assume either. Confirm details on your attempt page before test day.
Wrong Numbers Floating Around
Search results for GSOC include pages that disagree with GIAC. Some listings claim 115 questions, 240 minutes, and a 70% passing mark. Those claims conflict with GIAC's current figures of 75 questions, two hours, and 67%. A related product page advertises a 160-item practice bank, which is a different thing from the length of the real exam. Cost claims vary too; one indexed excerpt lists an exam fee of USD 949, whereas GIAC's current pricing is USD 999 before tax.
The takeaway is simple: use GIAC's own pages as your source of truth for the score, length, and fees, and treat third-party figures as unverified. Third-party material can still be useful for practice, but not for exam specifications.
| Item | GIAC Current Figure |
|---|---|
| Questions | 75 |
| Time limit | 2 hours |
| Minimum passing score | 67% |
| Exam fee | USD 999 before tax |
| Credential validity | 4 years |
What Happens If You Miss the Mark
Falling short is not the end, but it is expensive and it adds waiting time. Here is how the retake mechanics work:
- Retake fee: USD 899 for a failed-exam retake.
- Waiting period: a failed-exam retake normally requires a 30-day wait. The 60-day extension includes that wait.
- Three failures: trigger a one-year wait.
- Extensions: a 45-day extension costs USD 479 and adds 45 days within a 570-day total-access limit.
- Attempt window: a standalone attempt runs 120 days from activation; bundled training runs 120 days from the end of the event or matches the OnDemand course deadline.
GIAC also sells a practice test for USD 399. If you buy one, remember that your own practice-result review must stay within policy: do not copy, photograph, or retain GIAC question content. For the complete money picture, including optional training and renewal, read GSOC Certification Cost 2026: Complete Pricing Breakdown.
Key Takeaway
At USD 999 for the exam and USD 899 for a retake, a failed attempt is a real financial setback. Treat your practice readiness as a gate: schedule only when your independent practice results sit comfortably above 67%, not at it.
Building a Plan Around the Threshold
Since the weights are unknown and the pass line is fixed, the sensible strategy is to eliminate weak spots across all ten objectives rather than gambling on a favorite area. One compact way to sequence the work, tied to GSOC content, is below. Adjust the pacing to your own background.
Foundations and Triage
- Blue Team Defense Concepts and Endpoint Defense, so later evidence makes sense.
- Interpreting Events and Intrusion Triage and Analysis using Windows and Linux log examples.
Traffic and Protocols
- Network Traffic Analysis and Protocol Attacks and Analysis; practice reading captures and writing filters.
- HTTP(S) Analysis and Attacks, working from request and response examples.
Detection and SOC Operations
- Analytic Design and Tuning, Operational Improvement, and SOC Management Systems.
- Build and refine your index, then run timed 75-question rehearsals against the 2-hour limit.
Foundations come first because the evidence-interpretation objectives depend on them, and the process-oriented objectives are easiest to absorb once you have seen real artifacts. If you want questions to rehearse with, our GSOC practice tests are built to help you find weak objectives before exam day. For ongoing preparation habits and resource choices, the GSOC training overview is a useful companion.
Finally, remember that passing is a milestone, not the end of the line. The credential is valid for 4 years and renews with 36 qualifying CPEs or a renewal exam, with a USD 499 renewal fee. If you are weighing whether the effort is justified, see Is the GSOC Certification Worth It?. No representative GSOC-specific salary dataset or verified salary uplift was found, so be wary of promises on that front.
Frequently Asked Questions
The minimum passing score is 67%, applicable to exam versions released on or after August 28, 2021. The exam has 75 questions and a 2-hour limit.
On a 75-question exam, 67% is roughly 51 correct answers if every item counts equally. GIAC does not publish a scored versus unscored breakdown for GSOC, so use 51 only as a planning estimate and aim higher in practice.
GIAC has not published official weights or per-objective question counts in the sources we retrieved. Do not assume equal weighting or trust third-party percentage splits; prepare across all ten objectives.
Paper books, notes, and an index are permitted. Electronic and internet references are prohibited, as are exam and practice-question references. Confirm specifics on your attempt's certification-information page.
A failed-exam retake costs USD 899 and normally requires a 30-day wait. Three failures trigger a one-year wait. Our GSOC requirements guide and exam dates guide explain eligibility and timing in more detail.