CJCA Study Plan

The only entry cert that grades both red and blue team skills. A free, day-by-day CJCA schedule built from the official HTB Academy: Junior Cybersecurity Analyst Job Role Path syllabus, scaled to your exam date and weekly hours.

Approx. cost
$490–$1,260
Difficulty
♥♥♥♥♥
Study time
about 210h
Start level
Beginner

▶ Build my CJCA plan

> How long does CJCA take?

The plan assumes about 210 study hours. Here is how that stretches across different weekly schedules.

Hours per weekTime to finish
5 hoursabout 42 weeks (9.7 months)
10 hoursabout 21 weeks (4.8 months)
15 hoursabout 14 weeks (3.2 months)
20 hoursabout 11 weeks (2.5 months)
30 hoursabout 7 weeks (1.6 months)

> CJCA exam format

Hack The Box · HTB Academy: Junior Cybersecurity Analyst Job Role Path

  • Hybrid gray-box pentest + SIEM alert validation against a real corporate network segment
  • Must complete 100% of the Junior Cybersecurity Analyst job-role path first
  • No multiple-choice questions; a letter of engagement sets the scope
  • Commercial-grade risk report required to pass
  • The only HTB cert combining red-team and blue-team evaluation in one exam

Official CJCA page ↗

> CJCA syllabus and study hours

Every topic in the plan, in order, with its baseline hours. The planner shrinks or stretches these to fit your dates.

IT & Security Foundations

The absolute basics: security concepts, networking, Linux, and scripting.

  • Introduction to Information Security13h · learn
  • Network Foundations7h · learn
  • Introduction to Networking12h · learn
  • Linux Fundamentals17h · learn
  • Introduction to Bash Scripting6h · learn

Windows & Web Foundations

Round out the fundamentals before touching offense or defense.

  • Windows Fundamentals8h · learn
  • Introduction to Windows Command Line13h · learn
  • Web Requests4h · learn
  • Introduction to Web Applications9h · learn

Offensive Basics

A first pass through the full attacker workflow.

  • Introduction to Penetration Testing12h · learn
  • Pentest in a Nutshell13h · learn
  • Network Enumeration with Nmap7h · learn
  • Footprinting12h · learn
  • Hacking WordPress9h · learn
  • Using the Metasploit Framework8h · learn

Defensive Basics

The blue-team half of the path: traffic, logs, and SIEM alerts.

  • Intro to Network Traffic Analysis8h · learn
  • Incident Handling Process6h · learn
  • Windows Event Logs & Finding Evil3h · learn
  • Security Monitoring & SIEM Fundamentals6h · learn
  • Introduction to Threat Hunting & Hunting With Elastic3h · learn

Training Grounds

Practice both halves of the hybrid exam.

  • Easy HTB boxes end to end14h · lab
  • SIEM alert triage practice10h · lab

Final Boss Prep

A checklist for each half of the exam, then a dry run.

  • Build a dual red/blue checklist4h · review
  • Timed mock assessment6h · review

> Where to practise for CJCA

Each task in your plan lists practice labs for its own topic. These are the best places to put in extra hands-on hours:

> CJCA exam-day checklist

General logistics for exam week. The official exam guide always takes priority if it differs.

One to two weeks before

  • Schedule your exam and add the start time, time zone and deadline to your calendar
  • Read the official exam guide end to end: rules, allowed and banned tools, and what counts as proof
  • Practise both halves: the gray-box pentest and the SIEM alert validation
  • Complete a full-length timed practice run on your exam setup
  • Finalize your note-taking setup and templates (see the notes starter below)
  • Build and review your cheat sheets and command references
  • Arrange time off, tell people you will be unavailable, and plan your meals ahead

Machine and network

  • Charge and test a backup device or phone hotspot, and know how to contact support if your connection drops
  • Plug in your laptop and turn off sleep, updates and notifications for the exam
  • Test the VPN or lab connection early and know how to reconnect after a drop
  • Update your attack VM, take a clean snapshot and keep a spare
  • Install and test every tool you plan to use, and check none of them are banned
  • Test your screenshot hotkeys and make sure you have plenty of free disk space

During the exam

  • Sleep well the night before, and skip last-minute cramming
  • Prepare food and water, and set timers for break reminders
  • Read the brief and scope carefully before you touch anything
  • Write notes and capture proof as you go, not at the end
  • Time-box each target and move on when stuck. You can come back later

Report and submission

  • Copy your report template and fill in the easy parts (scope, methodology) while you work
  • Check every finding has reproducible steps and screenshots
  • Proofread: could someone else follow each step?
  • Export in the exact format and naming the exam guide requires
  • Submit with a buffer before the deadline and confirm it was received

Suggested exam-day rhythm

  • Before you start. Check how long the exam window is and work backwards from the deadline.
  • Daily. Fixed working blocks of about 90 minutes, a 10-minute break after each, and a proper stop at night.
  • Each day. Update notes, list your next ideas and back up your evidence.
  • Near the end. Stop new attacks early enough to verify findings and write the report.
  • Submission. Submit with a buffer before the deadline and confirm it was received.

▶ Open the interactive CJCA exam kit

The kit lets you tick items off, download a notes starter and report template, and see a readiness score from your plan progress.

> Passed CJCA with PWN PATH

No CJCA debriefs yet

Passed a cert? A short debrief helps the next learner plan their own run, and it only takes a couple of minutes.

▶ Share my debrief

Debriefs are self-reported. See all pass stories.

> Frequently asked questions

How long does it take to prepare for CJCA?

PWN PATH builds the CJCA plan on about 210 study hours. At 10 hours a week that is roughly 21 weeks, and at 20 hours a week roughly 11 weeks. Your own timeline depends on how much of the material you already know.

What is the CJCA exam like?

Hybrid gray-box pentest + SIEM alert validation against a real corporate network segment. Must complete 100% of the Junior Cybersecurity Analyst job-role path first. No multiple-choice questions; a letter of engagement sets the scope. Commercial-grade risk report required to pass. The only HTB cert combining red-team and blue-team evaluation in one exam.

How hard is CJCA?

We rate CJCA 1 out of 5. It suits newcomers who want both attacker and defender basics before choosing a side. None. You must finish the whole job-role path before the exam.

How much does CJCA cost?

HTB Academy subscription plus a $210 exam voucher. Silver Annual is about $490–550 with a voucher included; some advanced paths need Gold. Prices are approximate, in US dollars unless a currency is shown, and change often. Confirm with the vendor before you buy.

What should I study first for CJCA?

Start with the "IT & Security Foundations" phase: Introduction to Information Security, Network Foundations, Introduction to Networking. The planner puts topics in a sensible order and scales the hours to the time you have.

What are the prerequisites for CJCA?

None. You must finish the whole job-role path before the exam.

What should I do the week before the CJCA exam?

Re-read the official exam guide for rules and banned tools, test your machine, network and VPN or lab connection, finish a full timed practice run, finalize your notes and cheat sheets, and plan your meals, breaks and sleep. The exam-day checklist on this page covers it step by step.

How should I handle breaks and sleep during the CJCA exam?

Before you start: Check how long the exam window is and work backwards from the deadline. Daily: Fixed working blocks of about 90 minutes, a 10-minute break after each, and a proper stop at night. Each day: Update notes, list your next ideas and back up your evidence. Near the end: Stop new attacks early enough to verify findings and write the report.

What should I take after CJCA?

Common next steps are CDSA, OSDA, CPTS. See the roadmap to compare them.

Is the PWN PATH study planner free?

Yes. There are no accounts and no sign-up. Your plan and progress are saved in your browser, and you can export a backup file, add the schedule to your calendar or print it.

> Plan your path

Where it leads:

CDSAOSDACPTS

More in blue team & soc:

BTL1OSIROSDACDSA

Not sure CJCA is right for you? Take the one-minute cert quiz.