Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

Careers

Certification Exam Day Rules: ID, Breaks, Proctoring, and Retakes Compared Across Vendors

M
Mark Sabo Training Camp
Published
Read Time 18 min read
Certification Exam Day Rules: ID, Breaks, Proctoring, and Retakes Compared Across Vendors

ISC2 requires two forms of identification at the test center, and the first and last name on your ID has to match your Pearson VUE registration exactly, letter for letter. A candidate who registered as Robert and shows up with a license reading Robert J. has a problem that cannot be solved at the counter, because name changes are not permitted on test day, including at the test center. The failure mode is expensive. If you cannot meet the ID requirements when you arrive, ISC2 records you as a no show and you forfeit the testing fee.

Exam day rules are not uniform across certification bodies, and candidates usually discover the differences the hard way. Every break you take on an ISC2 exam eats your testing clock. CompTIA online exams give you no breaks at all. Cisco lets you retest five calendar days after a failed written exam, while ISC2 makes you sit out thirty. Below is what actually happens at check in, the things that end a session early, and how the retake windows compare across programs, with every rule traced back to the vendor that published it.

Almost nothing that ends an exam early has anything to do with whether the candidate knew the material.


What Happens at Test Center Check In

Plan to arrive thirty minutes before your appointment. That number is not padding. Check in for a high stakes security exam takes real time, and the administrator will move through a fixed sequence before you get anywhere near a keyboard.

You present identification. For ISC2 exams that means a primary ID carrying both a photo and a signature, plus a secondary ID carrying a signature. Then comes a digital signature on a pad, which the administrator compares against the signature on your ID, followed by a photograph. Hats, hoods, scarves, and coats come off for the photo, and they stay off inside the test room. Many programs, ISC2 among them, then take a palm vein scan, which uses near infrared light to read the vein pattern under your skin. You will scan again every time you leave and reenter the room, which is how the center knows the person who walked out for a bathroom break is the person who came back.

Personal belongings go into a locker. Storage is small, so leaving the backpack in the car is smarter than trying to cram it in. ISC2 also runs a zero tolerance electronics policy that starts with a self pat down: you turn out your pockets, run your hands around your waistline and down your leg, and glasses go on a turntable for inspection. Devices have to be stored before that process begins or you will be asked to leave.

One recent change deserves attention. As of June 2026, ISC2 notes on its exam day page that Pearson has begun advanced screening aimed at covert recording devices, and candidates may be scanned with both infrared and metal detection wands on arrival. If you sat a CISSP two years ago and expect the same walkthrough, it will feel different now.

Once you are seated, you get an erasable note board, a short orientation, and three minutes to read and accept the nondisclosure agreement. Decline it and you do not sit the exam, and the fee is gone. Three minutes is not long enough to read it carefully for the first time, so read it beforehand.

The Name Matching Rule Nobody Reads Until It Is Too Late

ISC2 gives you until forty eight hours before your appointment to correct a name mismatch through your account. Inside that window, the fix is not available, and the recommendation from ISC2 itself is to reschedule rather than gamble on the counter letting it slide. Candidates who legally changed their name need to bring an original marriage license, divorce decree, or court ordered name change document. Photocopies get rejected.

Check the spelling on your registration the day you book, not the week you test.


Why ISC2 Will Not Let You Test From Home

This is the single biggest structural difference between ISC2 and everyone else, and candidates ask about it constantly. CompTIA, Microsoft, Cisco, PMI, and ISACA all offer a remote proctored path. ISC2 does not. CISSP, CCSP, SSCP, CGRC, and CC are delivered in person at Pearson VUE test centers, full stop.

It was not always a settled question. ISC2 began exploring online proctoring in 2021 and ran two pilot programs using the strictest security protocols available at the time. The results ended the experiment. According to ISC2’s published findings on the pilots, the organization and its delivery partners documented widespread irregular exam results, clear violations of administration rules, and verified cheating attempts. What makes the finding hard to argue with is the control group sitting right next to it: across the same period, ISC2 observed no change in irregularities among in person candidates. Management and the Board concluded that online proctored delivery, using the methods available, put the reputation of the credential at unnecessary risk.

My read on it is that ISC2 made the right call and paid a real price for it. The value of a CISSP rests entirely on the assumption that everyone holding one actually sat the exam under supervision. Loosen that and the credential erodes for every person who already earned it. The cost lands on candidates in countries with thin test center coverage, who now face travel and scheduling that a CompTIA candidate simply does not. ISC2 has said it will keep monitoring remote proctoring technology and may run further pilots, so this is a policy worth rechecking rather than assuming permanence.

Practical consequence: if you are planning a CISSP attempt, seat availability at your nearest center is a scheduling constraint you need to solve early, not a detail to handle after you finish studying. Candidates routinely finish preparing and then find the next open seat within driving distance is six weeks out, by which point the material has cooled off.


Break Policies Are Wildly Different and Nobody Tells You

Candidates carry assumptions between exams, and break rules are where that habit costs the most. There is no shared standard here at all.

On an ISC2 exam, every break runs against your total testing time. You raise your hand, the administrator releases you, you leave the testing room, and you submit to a palm vein scan going out and coming back. Leaving the building is not allowed, and personal belongings stay off limits unless there is a real need such as retrieving medication. Nothing about that process is fast, which is why a bathroom trip on a CISSP costs meaningfully more than the walk itself.

CompTIA online proctored exams handle it more bluntly. Breaks are not permitted at all, and CompTIA’s guidance tells candidates to use the restroom before check in. The only exception runs through a documented and preapproved accommodation, and even then it applies at a test center rather than at your kitchen table. Leaving webcam view without one ends the session.

PMI takes the opposite approach and builds scheduled breaks into the PMP structure. That has historically been the friendliest break policy of the major programs. One caution applies right now, though: PMI launched a revised Examination Content Outline on July 9, 2026, and the exam changed with it. A large share of the PMP timing guidance circulating online still describes the previous format. Verify the current section and break structure on PMI’s own exam page before you build a pacing plan around a number you read in a study guide.

⏱️ How Breaks Work by Program
ISC2

Unscheduled only. All break time counts against your exam clock. You must leave the testing room, cannot leave the building, and scan your palm on the way out and back.
COMPTIA ONLINE

No breaks. Leaving webcam view without a preapproved accommodation terminates the exam. Use the restroom before check in.
ISACA

Delivered through PSI at test centers or remotely. Stored belongings stay off limits until the exam is submitted, and proctors can pause the session when something triggers a review.
PMI

Scheduled breaks built into the exam structure. Confirm current timing against PMI directly, since the exam changed on July 9, 2026.


What Gets an Online Proctored Exam Terminated

Remote testing removes the drive and adds a long list of ways to lose your session. CompTIA publishes the clearest version of these rules in its online proctored exam guidelines, and the technical requirements alone disqualify a lot of home setups.

You need Windows 10 or macOS 13 or higher, and virtual machines are prohibited. One display only, so a second monitor has to be disconnected and powered down, and touch screens are not permitted for use during the exam. Minimum connection speed is 6 Mbps down and 2 Mbps up. Corporate networks and VPNs are out, which catches an enormous number of candidates who assumed testing from the office made them look responsible. Run the OnVUE system test on the exact machine and network you plan to use, not on a laptop you might swap out.

The behavioral rules are stricter than most people expect. Reading questions out loud is prohibited. Your face and ears must stay in full webcam view, which rules out hoods, headphones, and earbuds. Everything on the desk that is not your exam computer has to go, and books, notes, pens, food, and drinks need to sit beyond arm’s reach rather than merely tidied into a pile at the edge. Any whiteboard hanging in the room gets wiped before you start. Physical note taking materials are banned entirely, so the built in digital whiteboard is your only scratch surface. CompTIA also states plainly that both upper and lower body must be properly covered for the entire session, and appearing on camera otherwise terminates the exam. If a family member walks in, or a pet wanders into frame, the session is terminated outright. And when something does go wrong technically, the proctor cannot pause your exam, add time, or fix your equipment, which is worth internalizing before you rely on a connection you already know is flaky.

One geographic detail catches people off guard. OnVUE delivery is not available to candidates from Cuba, Iran, North Korea, Sudan, Syria, Russia, Belarus, and certain Ukrainian territories. Cisco maintains its own separate embargo list for testing, so the restricted set is not identical across programs.

ISACA Runs on a Different Platform Entirely

CISA, CISM, CRISC, CGEIT, and CDPSE candidates should stop reading Pearson VUE instructions, because ISACA delivers through PSI. Test centers and remote proctoring are both available, and the remote setup includes a step the other programs do not use. After the standard room scan, ISACA requires a mirror check, where you use a portable mirror or your phone to show the proctor the blind spots your built in webcam cannot reach, including under your keyboard and behind your monitor. Your phone is permitted for exactly that purpose and nothing else.

Remote proctor communication happens through live chat in English only. If English is not your strongest language, that is a genuine argument for choosing a test center over your living room.


Showing Up Late, and What Happens When the Technology Fails

Arriving within fifteen minutes of your ISC2 start time makes you late, and late means you may forfeit your assigned seat. The center decides whether it can seat you without disrupting other candidates. When it cannot, you are turned away, recorded as a no show, and you lose the fee. CompTIA online candidates get a harder line: check in opens thirty minutes before the appointment, and more than fifteen minutes late means you are not testing.

Technical failures are handled better than most candidates assume, but only if you act at the right moment. ISC2 gives you a choice when a center problem delays your start by more than thirty minutes, or interrupts an exam in progress by more than thirty minutes. You can keep waiting or reschedule at no additional cost. Choose to push through and finish, though, and the result stands with no further recourse. Microsoft handles it through a waiver process, and the waiver requires a Pearson VUE case number opened the day of the incident, which is why raising the issue before you leave the session matters more than complaining about it the next morning.

Rescheduling deadlines vary too. ISACA lets you move an appointment without penalty up to forty eight hours before the scheduled time. Inside that window you either sit the exam or forfeit the registration fee.

Naming note: Pearson VUE is rebranding to Pearson Professional Assessments. You will see both names across confirmation emails, policy pages, and scheduling portals for a while. Same company, same centers, same rules.


Retake Windows Compared

Here is where bad information does the most damage, because a wrong retake window wrecks a study plan. Search results are full of sites claiming CompTIA imposes a fourteen day wait after your first failure. That is not what CompTIA’s policy says.

Program Wait After First Failure Subsequent Attempts Annual Cap
CompTIA None 14 calendar days before the third attempt and every one after None published
ISC2 30 test free days 60 days after the second attempt, 90 days after the third and beyond 4 per 12 months, per certification
ISACA 30 days from the first attempt 90 days after the second attempt, 90 days after the third 4 in a rolling 12 months
Cisco 5 calendar days, starting the day after Same 5 days for written exams, 30 days for expert level labs and practical exams, 48 hours for unproctored 700 series exams No published cap
Microsoft 24 hours 14 days between all later attempts 5 per 12 months from the first attempt

CompTIA’s published retake policy imposes no waiting period between your first and second attempt. The fourteen day rule kicks in before your third attempt and applies to every attempt after that. Beta exams are one attempt only, and passing an exam locks you out of retaking that same exam code without written consent, which is why recertifying usually means waiting for a new version to release. Cisco publishes its windows on its exam and certification policies page and Microsoft publishes its own on Microsoft Learn. Check both directly rather than trusting a summary, including this one, because retake windows are among the rules vendors revise most quietly.

Every program on that table charges for each attempt, and none of them discount a failed retake by default. Cisco is the nearest thing to an exception, since it sells a separate CCNA Exam Safeguard product that covers one. Otherwise the first sitting is worth more than candidates tend to treat it, especially on exams where the real first attempt pass numbers are worse than the confident forum posts suggest.

The short windows do more damage than the long ones, which is the reverse of what most candidates assume. A CompTIA candidate who can rebook immediately often does, walks back in three days later carrying the same gaps, and pays twice for one lesson. Thirty days is annoying, but it is enough time to actually fix something. If your first attempt failed, work through your score report by domain before you touch the calendar, and be honest about whether you were hitting suspiciously high numbers on practice material beforehand, because scoring perfectly on practice tests is usually a warning sign rather than a green light.


Testing Onsite at the End of a Course

A handful of training locations, including several of ours, operate as authorized test centers, which means candidates sit the exam at the end of the course instead of booking a separate appointment weeks later. Worth understanding how that actually works, because it is not a shortcut and the rules do not soften.

An authorized center has to meet the same physical and procedural security standards as any other. Two forms of ID, lockers, palm vein scanning, camera and audio monitoring, and a proctor who is not your instructor. The certification body does not grant a training provider any leniency on the exam itself, and it should not. What the arrangement changes is timing, not difficulty.

Timing turns out to matter more than people expect. The gap between finishing a course and sitting the exam is where a lot of candidates quietly lose. Momentum fades, work reasserts itself, the exam slides from three weeks out to two months out, and the domain detail that was sharp on Friday afternoon is fuzzy by the time the appointment arrives. Testing while the material is still hot removes that decay. It also removes the seat availability problem described earlier, which for ISC2 candidates is a real scheduling constraint rather than a minor convenience.

The honest caveat is that onsite delivery depends on the certification body, the exam, and the specific location, and it is not offered everywhere. Anyone counting on it should confirm availability for the exact class and site they are considering rather than assuming it comes standard. The reverse is also true: if the timing does not suit you, testing later at any Pearson VUE or PSI center is always an option, and nothing about a course requires you to sit the exam that week.


What to Do the Week Before

Pull up your registration and compare the name against the ID you plan to bring, character for character. Confirm your second form of ID if the program requires one, and confirm it carries a signature. Read the nondisclosure agreement in advance so the three minute timer at your workstation is a formality. Testing remotely means running the system test on your actual exam machine and network, then telling everyone in the building what time you will be unavailable and why the door stays shut.

Then check the policy pages yourself. Vendors revise these rules quietly, ISC2 added wand screening in June 2026 without much noise, and the version you read here should be verified against the source before you travel.


Frequently Asked Questions About Certification Exam Day

Can you take the CISSP exam online?

No. ISC2 delivers all of its exams in person at Pearson VUE test centers. After running two online proctoring pilots in 2021, ISC2 documented irregular results, rule violations, and verified cheating attempts, and concluded that remote delivery posed an unnecessary risk to the integrity of its certifications.

How many forms of ID do you need for a certification exam?

It depends on the program. ISC2 requires two, a primary ID carrying both a photo and a signature plus a secondary ID carrying a signature. CompTIA online proctored exams require one valid, unexpired, government issued photo ID. In every case the name has to match your registration exactly, and expired or digital IDs are rejected.

How long do you have to wait to retake a CompTIA exam?

There is no waiting period between your first and second attempt. Before your third attempt, and every attempt after that, you must wait at least fourteen calendar days from your last attempt. You pay full price for each attempt, and there is no annual cap on the number of tries.

Can you take a break during a CISSP exam?

Yes, but every minute counts against your total exam time. You raise your hand, leave the testing room, and submit to a palm vein scan going out and coming back. Leaving the building is not permitted, and personal belongings stay off limits unless there is a genuine need such as retrieving medication.

What happens if your internet drops during an online proctored exam?

Proctors cannot pause your exam, add time, or repair your equipment, so raise the issue through the Contact Proctor option and get an incident case opened before you leave the session. Microsoft, for example, will waive a retake waiting period for connectivity or equipment failure, but only when you supply the Pearson VUE case number created that day.

How early should you arrive for a certification exam?

Thirty minutes before your appointment for a test center exam, and check in for an online proctored exam opens thirty minutes early as well. Arriving within fifteen minutes of your ISC2 start time counts as late and may cost you your seat, and CompTIA online candidates more than fifteen minutes late are not permitted to test at all.

Do ISACA exams use Pearson VUE?

No. ISACA delivers CISA, CISM, CRISC, CGEIT, and CDPSE exams through PSI, at test centers or remotely proctored. Remote ISACA exams add a mirror check after the room scan, where you use a portable mirror or your phone to show the proctor the areas your webcam cannot see.

🎯 The Part Worth Remembering

Preparation for the exam and preparation for exam day are two different projects, and candidates only ever budget time for the first one. The logistics take an hour to sort out. Check the name on your registration, confirm your ID requirements, read the nondisclosure agreement early, and verify the retake window for your specific program so a failed attempt does not derail a timeline you built on a number from the wrong vendor. Time spent understanding how the question formats behave is wasted if a mismatched middle initial keeps you out of the room.

Mark Sabo

Director, Educational Services | Training Camp

Mark Sabo is the Director of Educational Services at Training Camp, where he oversees the training team, course design, and certification program development. He holds a B.S. in Information Sciences and Technology from Penn State University and more than 50 industry certifications. Mark joined Training Camp in 2005, became a Technical Trainer in 2007, and assumed his current leadership role in 2015. His specialty is practice exam development and exam preparation strategy, built from years of teaching students in the classroom and studying how certification exams are constructed. His writing focuses on the technical details that matter most to professionals preparing for high stakes exams.