- How GMON Scheduling Actually Works
- The 120-Day Attempt Window
- Pearson VUE Onsite vs. ProctorU Remote
- Fees That Shape Your Timeline
- What You Are Scheduling: Format and Scoring
- Planning Backward From Test Day
- Mapping the 17 Domains to Your Calendar
- Renewal Deadlines After You Pass
- Frequently Asked Questions
- GMON is delivered as proctored attempts you activate and schedule yourself, not on fixed public exam dates.
- A standalone attempt gives 120 days of access from activation, so your study plan must fit that window.
- You can test onsite through Pearson VUE or remotely through ProctorU, subject to GIAC modality rules.
- The exam is 82 questions in three hours, with a 74% minimum passing score.
How GMON Scheduling Actually Works
Searching for "GMON exam dates 2026" usually turns up a disappointing result: there is no published calendar of fixed national testing days for the GIAC Continuous Monitoring Certification. Unlike some credentials that run a handful of exam sittings per year, GIAC exams are attempt-based. You obtain an attempt, activate it, and then book a proctored session inside the access window that comes with it.
That distinction changes how you should think about "dates." The calendar that matters is yours: the day you activate your attempt, the day your access expires, and the appointment slot you reserve with your chosen proctoring provider. For attempt-specific details, GIAC points candidates to their own account at exams.giac.org/pages/attempts, which is the authority on your assigned exam version, question types, format, and passing score.
If you are still deciding whether to pursue this credential at all, the overview in What Is GMON Certification? explains what GIAC Continuous Monitoring Certification covers, and GMON Requirements 2026 confirms the eligibility picture: there are no formal certification prerequisites, though training is recommended.
The 120-Day Attempt Window
A standalone GMON attempt provides 120 days of access from activation. This is the single most important scheduling number to internalize. It is a hard boundary on your preparation: whatever study plan you build must reach exam day before that clock runs out.
Two practical consequences follow:
- Do not activate early. Activation starts the 120-day countdown. If you buy an attempt but are still weeks from being ready to study seriously, hold off on activation so you do not burn days you cannot use.
- Book your proctored slot early in the window. Popular appointment times, particularly onsite seats, can fill. Reserving a date a few weeks out gives you a fixed target and leaves buffer in case you need to reschedule.
The window also matters if you are combining the exam with SANS training. The affiliated course, SANS SEC511 (Cybersecurity Engineering: Advanced Threat Detection and Monitoring), is the preparation curriculum associated with this certification. If you take the course first, plan your activation so the window opens when your course material is fresh and your index is largely built. More on training choices is in GMON Training.
Key Takeaway
Treat the 120-day window as a project deadline. Work out your target exam date first, then count backward to decide when to activate, rather than activating and hoping the schedule sorts itself out.
Pearson VUE Onsite vs. ProctorU Remote
GMON is a proctored, web-based exam, and GIAC offers two delivery paths: Pearson VUE test centers for onsite delivery, and ProctorU for remote proctoring. Availability is subject to GIAC's modality rules, so confirm which options apply to your attempt when you schedule.
| Factor | Pearson VUE (Onsite) | ProctorU (Remote) |
|---|---|---|
| Location | Test center | Your own approved workspace |
| Scheduling pressure | Depends on local seat availability | Often more flexible time slots |
| Environment control | Provided by the center | You must meet room and equipment requirements |
| Open-book materials | Permitted hardcopy books, notes, and index | Permitted hardcopy books, notes, and index |
| Prohibited items | Electronic references, practice/exam Q&A materials | Electronic references, practice/exam Q&A materials |
Because GMON is open book for hardcopy materials, your scheduling decision should account for logistics: can you comfortably carry and arrange a stack of books and a printed index at a test center, or do you have a quiet, compliant desk at home? Whichever route you pick, review GIAC's proctoring guidance, including the Proctored Exam Reference Guide, well before test day so there are no surprises about ID, room setup, or allowed items.
Fees That Shape Your Timeline
Money and calendar are linked here, because a failed attempt means buying another one. The published figures, which exclude applicable sales tax and training tuition:
| Item | Price (USD) |
|---|---|
| Standalone GMON attempt | $999 |
| SANS-associated exam attempt (course tuition additional) | $999 |
| Separately listed practice exam | $399 |
| Retake | $899 |
| Standard renewal | $499 |
With a $999 attempt and an $899 retake, rushing into an under-prepared sitting is expensive. A sensible scheduling habit is to plan your first attempt for a date when you are consistently scoring comfortably above the 74% threshold on timed practice, rather than the earliest date the calendar allows. For a full breakdown of what each path costs end to end, see GMON Certification Cost 2026, and for the return side of the equation, Is the GMON Certification Worth It?
What You Are Scheduling: Format and Scoring
Before you book, know exactly what the appointment involves. GMON is a single proctored web-based exam that combines multiple-choice questions with CyberLive practical tasks. It contains 82 questions and runs three hours in total. The three-hour limit covers the complete exam, and no separate practical timer or question-type split is published, so plan your pacing across the whole session rather than assuming a fixed per-section budget.
The minimum passing score is 74%. Note that this is a score threshold, not a pass rate; no issuer-published pass rate has been verified. If you want to understand how the threshold translates into correct answers and how to think about it, read GMON Passing Score 2026, and for the honest state of the data on outcomes, GMON Pass Rate 2026.
Which exam version you are assigned is shown in your GIAC account, so check it when you activate. The scoring specification GIAC cites applies to versions released on or after December 23, 2015, but that date marks when the scoring rule applies, not when the current content was last revised. Do not read it as a syllabus date.
Why CyberLive affects your scheduling
CyberLive tasks are hands-on, so your preparation needs lab time, not just reading. Hands-on practice with monitoring tooling takes longer to build than memorization. When you pick your exam date, make sure your calendar includes enough practical repetition: working through log sources, alert tuning, and tool output, not merely re-reading notes. For a sense of how demanding the combined format is, see How Hard Is the GMON Exam?
Planning Backward From Test Day
Because GMON has no fixed national dates, the cleanest approach is to anchor everything to a single appointment you choose. Here is a practical sequence:
- Decide your target sitting. Pick a realistic month based on your training schedule and work commitments.
- Choose onsite or remote. Pearson VUE or ProctorU, subject to GIAC modality rules, determines how you prepare your physical materials.
- Time your activation. Activate so that 120 days comfortably contains your study period, your lab practice, and a buffer for rescheduling.
- Book the slot early. Reserve your appointment soon after activation to lock in a convenient time.
- Build your index while you study. The open-book allowance rewards an index you assembled yourself, so schedule index work as you go, not in the last week.
Mapping the 17 Domains to Your Calendar
The public exam outline lists 17 objective areas but supplies no percentage weights, so do not assume any domain counts more than another when allocating time. SANS groups the 17 objectives into five preparation overview groups, and the six SEC511 course sections are a separate structure again; none of these establish official weights. Use the domains below as a checklist, and see GMON Exam Domains 2026: Complete Guide to All 17 Content Areas for a deeper treatment.
This is the one place where a study-sequencing suggestion is worth making, tied specifically to GMON content. A sensible order moves from foundations to detection tooling to adversary-informed defense:
Foundations and architecture
- Cyber Defense Principles
- Security Architecture Overview
- Network Data Encryption
- Perimeter Protection Devices
Detection and monitoring tooling
- NIDS/NIPS/NGFW and Network Security Monitoring Tools
- Proxies & SIEM
- HIDS/HIPS/Endpoint Firewalls and Device Monitoring
- Account & Privilege Monitoring & Authentication
Hygiene, configuration, and attacker view
- Configuration Monitoring, Patching & Secure Baseline Configurations
- Software Inventories and Application Control, Discovery and Vulnerability Scanning
- Attack Techniques, Exploit Methodology and Analysis, Threat Informed Defense
This ordering places tool-heavy, hands-on material in the middle of your window so you have time to practice it before CyberLive-style tasks, and leaves the attacker-oriented domains for the end so they connect the defensive pieces into a coherent picture. The final stretch should be timed practice and index refinement. For a consolidated week-by-week approach, the GMON Study Guide 2026 goes further, and the GMON Cheat Sheet is useful for last-week review.
Where candidates commonly need extra calendar time
Tool-focused areas reward repetition more than reading.
- Proxies & SIEM: understanding log sources, correlation, and what data a SIEM needs to be useful.
- NIDS/NIPS/NGFW and Network Security Monitoring Tools: interpreting alerts and tool output rather than just defining terms.
- Discovery and Vulnerability Scanning: knowing how scanning results feed monitoring and patching decisions.
Renewal Deadlines After You Pass
Scheduling does not end when you pass. A GMON certification is valid for four years. To renew, you can either earn 36 CPE credits or take a renewal examination, and in both cases you pay the renewal fee, listed at $499 for standard renewal. Mark your four-year anniversary on a calendar the day you certify, and start logging CPE activity early so you are not scrambling in the final months.
If you are weighing the long-term value of keeping the credential current, GMON Salary Guide 2026 and GMON Jobs look at how monitoring and detection skills are used in the field, while GMON Certification offers a general overview of the credential itself.
Frequently Asked Questions
No fixed public calendar of national exam days was identified. GMON is attempt-based: you activate an attempt, then schedule a proctored session within your access window. Check your account at exams.giac.org/pages/attempts for attempt-specific details.
A standalone attempt provides 120 days of access from activation. Plan your study schedule and appointment so that the exam falls comfortably inside that window.
GIAC offers remote proctoring through ProctorU as well as onsite delivery through Pearson VUE, subject to GIAC modality rules. Confirm which options apply to your attempt when you schedule.
The exam has 82 questions combining multiple-choice items with CyberLive practical tasks, with a three-hour limit covering the complete exam. The minimum passing score is 74%.
The certification is valid for four years. Renew with 36 CPE credits or by passing a renewal examination, plus the renewal fee. Start tracking CPE credits well before your four-year mark.
Your most useful "date" is the one you set yourself. Choose a target sitting, count backward through your 120-day window, and use timed sessions on the GMON Exam Prep practice tests to confirm you are ready before you book.