- What You Are Actually Studying For
- Two Components, Two Different Assessments
- The Nine Advanced Intrusion Systems Topics
- The Seven Fundamentals of Networking Subjects
- Beating a 50-Question, Open-Book, 2-Hour Exam
- Eligibility, Fees, and Paperwork to Settle Early
- A Sequencing Plan Built Around the Sixteen Topics
- After You Pass: Validity, Renewal, and Where the Credential Fits
- Frequently Asked Questions
- CIT Level II is a coursework-and-experience credential from ESA, not one standalone exam.
- The AIS exam is 50 multiple-choice questions, 2 hours, open book with the manual, 70% to pass.
- Networking is a separate 4-hour course ending in a 70% terminal quiz; do not assume AIS rules apply.
- Sixteen published topics (nine AIS, seven networking) define your scope, but no official domain weights exist.
What You Are Actually Studying For
The most common mistake candidates make with Certified Intrusion Technician Level II is treating it like a single proctored test with one blueprint. It is not. CIT Level II, issued through the Electronic Security Association (ESA) and its National Training School, is a coursework-and-experience certification. You earn it by holding a qualifying lower-level credential, accumulating verified industry time, completing two required courses, and submitting a documented certification request.
That structure changes how you should prepare. There is no unified, weighted CIT exam blueprint published anywhere. What ESA does publish is the topic list for each of the two required additional courses: Advanced Intrusion Systems (AIS) and Fundamentals of Networking. Those two topic lists, nine and seven items respectively, are the real study scope. If you want the credential background first, see our explainers on what CIT certification is and the full CIT requirements.
Two Components, Two Different Assessments
Keep a hard mental wall between the two required courses. Their assessment formats are not interchangeable, and the public listings do not support borrowing details from one to describe the other.
| Item | Advanced Intrusion Systems (AIS) | Fundamentals of Networking |
|---|---|---|
| Published topics | Nine | Seven |
| Course length | 14 hours online instruction (course page tagged Revised 2020) | 4 hours of instruction |
| Assessment | Proctored multiple-choice exam: 50 questions, 2 hours | Short terminal quiz |
| Passing score | 70% | 70% or higher |
| Open book? | Yes, using the course manual | Not verified publicly |
| Proctoring | Verified proctor required for certification | Not verified publicly |
| Question count / timer | 50 questions / 2 hours | Not verified publicly |
Two cautions deserve emphasis. First, the 14-hour figure is instruction time for the online AIS course, not an exam timer; the exam itself is two hours. Second, the AIS online course also includes a short 70% completion quiz that is separate from the proctored certification exam. Do not confuse the two, and do not assume the networking quiz mirrors the AIS exam in length, format, or proctoring. For a deeper look at difficulty by component, read how hard the CIT exam really is.
The Nine Advanced Intrusion Systems Topics
AIS is the heavier of the two components and the one with the proctored, open-book exam. ESA publishes nine topics. We label them Domains 1 through 9 here for organization, but the underlying wording belongs to ESA, and the numbering implies no weighting. For a topic-by-topic breakdown, see our complete guide to all 16 CIT content areas.
Domain 1: Practical application of electronics
The foundation under everything else. Expect to reason about circuits the way a field technician does.
- Be fluent with voltage, current, resistance, and how they interact in alarm circuits
- Know how to read and apply basic electronic relationships rather than just recite them
Domain 2: Practical application of controls
How control equipment is applied in real installations.
- Understand how panels and control devices act on input conditions
- Be able to connect control behavior to the symptoms a customer would report
Domain 3: System power
Power is where field failures hide. Treat this as a high-practicality topic.
- Review primary and backup power concepts and what happens when each fails
- Practice working through power-related troubleshooting logic step by step
Domain 4: Input and output
How the system senses conditions and how it responds.
- Distinguish initiating inputs from outputs such as sounders and relays
- Know how inputs and outputs are wired and verified
Domain 5: Networking and Communication
How intrusion systems report and communicate. This bridges naturally into the separate networking course, so study it alongside Domains 10 through 15 without merging the two assessments in your head.
Domain 6: Advanced systems and devices
Moves beyond entry-level hardware into more capable systems and devices a Level II technician is expected to handle.
Domain 7: Testing and commissioning
How a system is proven out before handover.
- Know what a disciplined test sequence looks like
- Understand what must be verified before a system is considered commissioned
Domain 8: Project management
Often underestimated by technically strong candidates. Level II work involves planning, coordination, and documentation, not just wiring.
Domain 9: Residential and commercial sensor application
Matching sensor types to environments.
- Be ready to justify sensor selection for residential versus commercial scenarios
- Think in terms of the application, not just the device spec
The Seven Fundamentals of Networking Subjects
The networking component is shorter, but do not dismiss it. It has its own 70% terminal quiz, and its seven published subjects are broad. These map to Domains 10 through 16 in our organization.
Domains 10 and 11: Network basics and topologies
Know what a network is, what its components are, and the common network topologies.
- Be able to describe each topology and its practical strengths and weaknesses
- Recognize components by function, not just by name
Domains 12 and 13: Communication and storage
How networks communicate and share data, and the storage types used in networked systems.
- Understand data movement at a conceptual level a field technician needs
- Be able to distinguish the storage types the course presents
Domains 14 and 15: Cabling and LAN versus WAN
The composition of a network cable, and how a LAN and a WAN function and differ.
- Know what makes up a network cable and why construction matters
- Be able to explain the LAN/WAN distinction in plain terms
Domain 16: Troubleshooting network problems
The steps of troubleshooting network problems. Memorize the sequence and be able to apply it to a described symptom.
Beating a 50-Question, Open-Book, 2-Hour Exam
The AIS exam gives you two hours for 50 multiple-choice questions, which is a comfortable pace on paper. Open book removes the pressure to memorize every figure, but it creates its own trap: candidates who skip real preparation lose time hunting through the manual for answers they should have known.
Make the manual a reference tool, not a crutch
- Work through the course manual once for comprehension before you ever treat it as a lookup source.
- Tab or index sections by the nine AIS topics so you can jump to power, input/output, or commissioning content quickly.
- Write short margin cues for the areas you find hardest to locate, such as where testing and commissioning steps sit relative to project management.
Practice applied reasoning, not recall
Because the questions are tied to practical application topics (electronics, controls, power, sensor placement), expect scenario-flavored items where the manual helps you confirm a concept but cannot reason through a situation for you. Our CIT practice tests are built to rehearse that style of thinking. The scored/unscored split on the AIS exam and the candidate pass rate are not publicly disclosed, so be wary of anyone quoting a precise figure; our pass rate breakdown explains what can and cannot be said.
Key Takeaway
Open book rewards organization. Spend preparation time making the AIS manual fast to navigate by topic, then use practice questions to find out which topics you still need to understand rather than look up.
Eligibility, Fees, and Paperwork to Settle Early
Because CIT is a coursework-and-experience credential, administrative readiness matters as much as content mastery. Sort this out before you invest in studying.
What you must have
- An active ESA Certified Alarm Technician Level 1 or higher ESA/accredited certificate.
- Either 24 months of verified industry work history, or at least 24 months holding the qualifying Level 1 credential.
- Both required courses, Advanced Intrusion Systems and Fundamentals of Networking, completed within the previous five years.
- A certification request with supporting documentation. There is no fee for the request itself.
The Level 1 prerequisite is separate from the two additional courses; completing AIS and networking does not substitute for it. Details are in our CIT requirements guide.
What it costs
| Route | Member | Nonmember |
|---|---|---|
| Full online bundle | $644.40 | $1,020 |
| AIS course only (existing-prerequisite route) | $308 | $440 |
| Networking course only (existing-prerequisite route) | $100 | $140 |
| AIS plus networking, calculated | $408 | $580 |
The existing-prerequisite route applies if you already hold the qualifying Level 1 credential and only need the two additional courses. If an exam attempt does not go your way, the ESA FAQ lists a retake fee of $135 and a six-month window to complete the testing process. For the full cost picture, see our CIT certification cost breakdown.
A Sequencing Plan Built Around the Sixteen Topics
Rather than a generic weekly template, here is an order that follows how the topics build on one another. Adjust the pacing to your own schedule and experience.
Electronics, controls, and power
- Cover Domains 1 through 3 first; every later topic assumes this foundation
- Prioritize system power troubleshooting logic
Inputs, outputs, and communication
- Study Domains 4 and 5
- Begin tabbing the AIS manual by topic
Advanced devices, commissioning, project management, sensors
- Cover Domains 6 through 9
- Sit a full-length timed practice set under realistic open-book conditions
Networking fundamentals
- Cover Domains 10 through 16, ending with the troubleshooting steps
- Review weak AIS topics from your practice results
Study networking after the AIS material in this plan because Domain 5 gives you the intrusion-specific communication context that makes the general networking concepts easier to anchor. Run the weekly cycle with short timed question blocks at the end of each topic group, then revisit anything you missed. A one-page recap is also useful; our CIT cheat sheet is a good model for building your own.
After You Pass: Validity, Renewal, and Where the Credential Fits
Once certified, CIT Level II is valid for 24 months. Renewal requires 24 CEU hours per two-year period plus an application and fee. The current renewal fee has not been verified, so confirm it with ESA when your cycle approaches. Keep records of continuing education as you go rather than reconstructing them at the deadline.
The credential is aimed at working intrusion and security technicians moving beyond entry-level alarm work, so it is most relevant to security and alarm contractors and integrators who need technicians trusted with advanced intrusion systems and networked equipment. For the career side, see CIT jobs, our salary analysis, and the ROI discussion. If you are still sizing up the pathway, CIT training options covers the course side in more depth.
Key Takeaway
Your path to first-attempt success is mostly about clarity: know the two components are separate, master all sixteen published topics, organize the open-book manual, and have your prerequisites and documentation lined up before you test. When you are ready to measure yourself, start with the CIT practice tests.
Frequently Asked Questions
No. CIT Level II is a coursework-and-experience credential. The published pathway requires the Advanced Intrusion Systems and Fundamentals of Networking courses, plus prerequisites and a certification request. There is no separate standalone CIT examination.
The AIS proctored exam has 50 multiple-choice questions, a two-hour limit, open-book use of the course manual, and a 70% passing score. The scored/unscored split and candidate pass rate are not publicly disclosed.
No. The networking course is four hours of instruction and ends with a terminal quiz requiring 70% or higher, but its question count, format, timer, open-book status, and proctoring are not verified publicly. Do not assume they match AIS.
The ESA FAQ lists a retake fee of $135 and a six-month window for completing the testing process. See our passing score guide and testing window overview for scheduling context.
It is valid for 24 months. Renewal requires 24 CEU hours per two years, an application, and a fee. The current renewal fee is not verified, so confirm it with ESA.