Which Cybersecurity Certification Should I Get? (Quiz)

The best next cybersecurity certification depends on your background. If you are new, start with ISC2 CC or CompTIA Security+. If a job ad mentions DoD 8140 or IAT Level II, use the DoD 8140 certification list. If you already do security work and want a manager or auditor path, look at CySA+ or CISA, or CISSP once you meet the experience rule. Career changers can also transition into cybersecurity at any age. Use the quiz below for a more specific pick, then open the matching guide. The quiz runs in your browser; nothing is saved or sent.

1. How much IT or security experience do you have?
2. What job do you want next?
3. Will you work for the US Department of Defense or a defense contractor?
4. Who is paying?
5. Which platform do you work with most?
6. Is AI security part of your job or plans?

How the recommendations work

The quiz follows the same logic as our certification roadmap: get the fundamentals that hiring managers screen for, then pick the cert your target job actually names. Experience matters because some exams require it (CISSP asks for five years, CISM and CISA for five in their fields) and others assume it. If cost matters, the quiz leans toward cheaper options; if an employer is paying, it can suggest pricier hands-on certs such as GSEC or OSCP.

Every certification guide on CyberExperts

StageGuides
Starting outCompTIA A+, Network+, Security+, ISC2 CC, cybersecurity certifications for beginners
Analyst and defenseCySA+, Microsoft SC-200, GIAC GSEC, Security+ vs CySA+, blue team certifications, digital forensics certifications
Offensive securityPenTest+, CEH, OSCP, CEH vs PenTest+ vs OSCP
Cloud and networkAWS Security Specialty, CCSP, CCNA, CISSP vs CCSP
Senior, management and auditCISSP, CISM, CISA, SecurityX, CISSP vs CISM
Specialty and planningAI security certifications, OT security certifications, DoD 8140 certification list, best certifications in 2026, cheapest certifications, cost calculator

Want practice before you book? The CyberExperts Certification Lab offers free certification practice for 12 cybersecurity exams. No card needed.

Free one-page Cert Exam Checklist (PDF). What to do six weeks out, two weeks out and on exam day. Join the CyberExperts Daily Brief and the download link appears here.

Weekday mornings, five minutes. Unsubscribe any time. You’ll get a confirmation email first.

Certification quiz FAQ

Which cybersecurity certification should I get first?

If you are new, start with ISC2 CC or CompTIA Security+. Use the quiz on this page for a more specific pick, then open the matching guide. If a job ad mentions DoD 8140, start with the DoD 8140 certification list instead of guessing.

Which cert is best for a SOC analyst?

Security+ to get in, then CySA+ for vendor-neutral analyst skills or Microsoft SC-200 if your SOC runs on Defender and Sentinel.

Which cert for DoD 8140?

It depends on the DCWF work role and proficiency level in the job ad. Security+ covers many Intermediate roles. Check the DoD 8140 certification list for your exact role, and confirm against the official matrix.

When should I go for CISSP?

When you have five years of paid security experience in at least two of its eight domains (a degree or approved credential can waive one year), or take the exam early and become an Associate of ISC2 while you build the experience.

Are certifications enough to get hired?

They get your resume past screening. Labs, a home project or a write-up of real work is what carries the interview.

Which cert if I have no experience?

ISC2 CC or CompTIA Security+ is the usual first security cert if you have no security job yet. If you are brand new to IT, consider A+ or Network+ first. The quiz above can narrow the first step, then open the matching guide.