- What "Hard" Actually Means for the CIT
- Two Required Courses, Not One Big Exam
- The AIS Exam: 50 Questions, Two Hours, Open Manual
- Which Topics Cause the Most Trouble
- The Networking Quiz: Short but Not Trivial
- The Real Gate: Prerequisites and Documentation
- Difficulty by Candidate Background
- Cost, Retakes, and the Six-Month Window
- A CIT-Specific Prep Sequence
- Frequently Asked Questions
- CIT Level II is two required ESA courses plus verified experience, not one standalone exam.
- The proctored Advanced Intrusion Systems exam has 50 multiple-choice questions, two hours, open manual, 70% to pass.
- Fundamentals of Networking ends with a 70% terminal quiz; its length and timing are not publicly verified.
- Eligibility is often the harder hurdle: a qualifying Level I-or-higher credential plus 24 months of experience.
What "Hard" Actually Means for the CIT
Search for "how hard is the CIT exam" and you'll find advice written for a different kind of credential: one high-stakes sitting, a published blueprint, a headline pass rate. The Certified Intrusion Technician Level II from the Electronic Security Association (ESA) and National Training School doesn't work that way, and that changes what difficulty means.
There is no standalone CIT examination. The credential is built from required coursework, a proctored exam attached to one of those courses, a short quiz attached to the other, and documented work or certification history. So the honest answer to "how hard is it?" has several parts: how demanding the Advanced Intrusion Systems (AIS) exam is, how much the networking material stretches you, and whether you can document your way through the prerequisites.
If you want the full picture of eligibility before judging difficulty, start with our guide to CIT requirements, prerequisites, and how to qualify. This article focuses on where candidates actually struggle.
Two Required Courses, Not One Big Exam
The current program requires two additional courses beyond your Level I foundation, both completed within the previous five years:
- Advanced Intrusion Systems (AIS): the technical heavyweight, with a proctored multiple-choice certification exam.
- Fundamentals of Networking: a four-hour course ending in a terminal quiz that requires 70% or higher.
Keep these two boundaries clean in your head. The details of one do not transfer to the other. The 50-question, two-hour, open-manual format belongs to the AIS exam only. Don't assume the networking quiz is open book, proctored the same way, or 50 questions long. The public course listing doesn't verify its question count, item format, or timer.
| Feature | Advanced Intrusion Systems | Fundamentals of Networking |
|---|---|---|
| Assessment | Proctored multiple-choice exam | Terminal quiz |
| Questions | 50 | Not verified publicly |
| Time limit | 2 hours | Not verified publicly |
| Open book | Yes, course manual allowed | Not verified |
| Passing score | 70% | 70% or higher |
| Course length | 14 hours online | 4 hours |
For a domain-by-domain breakdown of what each course covers, see our guide to all 16 CIT content areas.
The AIS Exam: 50 Questions, Two Hours, Open Manual
The proctored AIS exam is the centerpiece of the credential. It's 50 multiple-choice questions in two hours, with the course manual allowed and a 70% passing score. That works out to roughly 2.4 minutes per question, which is a comfortable pace for most candidates.
The format is more forgiving than it first looks. Open-book exams reward navigation skill more than memorization. But "open book" is also a trap: candidates who skim the manual during the course and plan to look everything up on exam day often run out of time hunting for answers on questions they should have known cold.
Exams are administered through ESA with Honorlock/Absorb online proctoring or approved in-person arrangements, and a verified proctor is required for certification or licensing purposes. Online proctoring adds its own friction: room scans, webcam and identity checks, and the stress of being observed while you flip through a manual. Do a technical dry run before exam day.
What the question style tends to reward
Because the exam is tied to a technician-level course rather than a theory-heavy academic body of knowledge, expect applied, scenario-flavored questions: what a given device does, how a circuit or input should be configured, what a technician should check first. If you've installed and serviced systems, many questions will feel like ordinary field decisions. If your experience is narrow, the breadth of the nine AIS topics will be the challenge.
Which Topics Cause the Most Trouble
ESA publishes nine AIS topics and seven networking subjects but no item weights, so no one can legitimately say which domain is "largest" or "most tested." What we can do is flag where candidates with different backgrounds tend to need the most time, based on the nature of the material itself.
Practical Application of Electronics and Controls (AIS Domains 1-2)
This is where field experience helps most, and where classroom-only learners struggle.
- Read circuit behavior, not just component names
- Understand how controls interact with sensors and outputs
- Be ready to reason through "what happens if" scenarios
System Power and Input/Output (AIS Domains 3-4)
Power and I/O questions punish vague understanding.
- Know how system power is supplied and backed up
- Understand how inputs trigger outputs and how they're configured
- Recognize the symptoms of power-related faults
Networking and Communication Within AIS (AIS Domain 5)
This domain bridges the two courses and is a common stumbling block for technicians who came up on older, non-networked panels.
- Understand how intrusion systems communicate
- Connect this domain to the Fundamentals of Networking material
Advanced Systems, Testing/Commissioning, Project Management, and Sensor Application (AIS Domains 6-9)
These topics are broad rather than deep. The difficulty is coverage.
- Residential versus commercial sensor application choices
- Commissioning and testing sequences
- Project management concepts that field technicians rarely study formally
Project management is the sleeper topic. Many working technicians have never been formally trained in it, and it's easy to under-prepare because it feels "non-technical." Don't skip it. The CIT cheat sheet is a handy way to review the must-know facts across all topics before exam day.
The Networking Quiz: Short but Not Trivial
Fundamentals of Networking is a four-hour course covering seven published subjects: what a network is and its components, common topologies, how networks communicate and share data, storage types in networked systems, network cable composition, how LANs and WANs differ, and the steps of troubleshooting network problems.
The terminal quiz requires 70% or higher. Because the quiz format isn't publicly detailed, the right strategy is to prepare for the whole course content rather than guess at what's likely to appear. A few notes on difficulty:
- For IT-adjacent candidates: this course will feel like review. Don't coast, though. The questions follow ESA's course wording, which may differ from vendor terminology you're used to.
- For traditional alarm technicians: terms like topology, LAN/WAN distinctions, and cable composition may be new. Budget real study time here rather than treating it as the easy half.
- For everyone: the troubleshooting-steps subject rewards learning the ordered sequence, not just the individual ideas.
Key Takeaway
Treat the two components as separate study projects. A strong networking background won't carry you through AIS, and deep intrusion experience won't automatically cover the seven networking subjects.
The Real Gate: Prerequisites and Documentation
For many candidates, the hardest part of the CIT isn't any exam question. It's qualifying. The program requires:
- An active ESA Certified Alarm Technician Level 1 or higher ESA/accredited certificate.
- Either 24 months of verified industry work history or at least 24 months holding the qualifying Level 1 credential.
- AIS (with its proctored exam) and Fundamentals of Networking completed within the previous five years.
- A certification request with supporting documentation.
Note that the Level 1 prerequisite is distinct from the two additional courses. Completing AIS and networking doesn't replace it. Verified work history means paperwork: employer confirmation, dates, role details. Candidates who've changed employers, worked for companies that have closed, or lack clean records can find this step slower than any exam. The certification request itself is free, but it must be documented.
The five-year window matters too. If you took one required course long ago and delay the other, an older completion can age out. Plan the two courses reasonably close together. Our CIT exam dates and scheduling guide covers testing windows and deadlines in more detail.
Difficulty by Candidate Background
Rather than inventing a single difficulty rating, here's how the credential tends to feel depending on where you start:
| Candidate profile | Likely friction points | Likely strengths |
|---|---|---|
| Experienced field technician with Level 1 | Networking vocabulary, project management, open-manual time management | Electronics, controls, sensor application, commissioning |
| Newer Level 1 holder at the 24-month mark | Breadth of AIS topics, limited hands-on exposure to advanced devices | Fresh course habits, recent certification study experience |
| IT or network-background technician | Intrusion-specific electronics, power, I/O, and device behavior | All seven networking subjects |
| Lapsed or document-poor candidate | Verifying work history, the five-year course window | Technical content may be familiar |
Overall, the technical content is aimed at working technicians and is generally approachable for people already in the trade. The open manual and 70% threshold make it less punishing than a closed-book, single-sitting credential. The risk is underestimating it. Candidates who don't read the manual before exam day, or who ignore the networking half, are the ones who end up paying a retake fee.
Cost, Retakes, and the Six-Month Window
Difficulty and cost are linked, because a failed attempt has a price tag. The published figures are:
- Full online bundle: $644.40 for members, $1,020 for nonmembers.
- Existing-prerequisite route: AIS at $308 (member) or $440 (nonmember), plus networking at $100 or $140, for a calculated total of $408 member or $580 nonmember.
- AIS retake: $135 per the ESA FAQ.
- Testing window: six months to complete the exam process.
The six-month window is a quiet source of pressure. It's long enough to retake if you stumble, but not long enough to put the course aside for a year and return. Start the exam process only when you're ready to finish it. Full pricing details are in our CIT certification cost breakdown, and if you're weighing the investment, the CIT ROI analysis and salary guide help frame it.
A CIT-Specific Prep Sequence
Generic study advice is plentiful. Here's a sequence built around how this particular credential is structured. The key is to treat AIS and networking as separate tracks and to use the open manual as a tool you've already mapped, not a crutch.
Qualify and organize
- Confirm your Level 1 credential is active and gather work-history documentation
- Check that both courses will land inside the five-year window
- Skim the full AIS manual once to learn its layout
Electronics, controls, power, and I/O
- Work through AIS Domains 1-4 first, since they underpin everything else
- Tab the manual sections you find hardest
Networking, both ways
- Study the seven networking subjects, then revisit AIS Domain 5 so the two connect
- Memorize the ordered troubleshooting steps
Breadth domains and timed practice
- Cover advanced systems, commissioning, project management, and sensor application
- Take timed 50-question practice sets at the two-hour pace, using only your tabbed manual
Practice questions should mirror the multiple-choice, manual-assisted format. You can run timed sets on our CIT practice test platform. For a fuller weekly roadmap, see the CIT study guide for first-attempt success. Note that practice-question allocation across topics on any prep site is editorial, not an official weighting.
Frequently Asked Questions
It assumes more. The CIT builds on a Level I-or-higher credential and covers more advanced systems, networking, and project topics. But the AIS exam is open manual with a 70% pass mark, so for experienced technicians the difficulty is more about breadth than trick questions.
There's no single standalone CIT exam. The proctored Advanced Intrusion Systems exam has 50 multiple-choice questions in two hours. The Fundamentals of Networking terminal quiz requires 70% or higher, but its question count isn't publicly verified.
For the AIS exam, the course manual is allowed (open book). Don't assume that applies to the networking quiz, since its rules aren't verified publicly. Check your course instructions before testing.
The ESA FAQ lists a $135 retake fee, and the exam process must be completed within a six-month testing window. Plan your retake promptly rather than waiting until the window is nearly closed. See our CIT passing score guide for how the 70% threshold works.
For technicians who want to advance in intrusion system work, many find it a logical next step, but the value depends on your employer, region, and career goals. The CIT jobs overview and the ROI analysis linked above can help you decide.