6.3 Exam-Day Checklist

6.3 Exam-Day Checklist

Exam day should be administratively boring. The CySA+ CS0-003 is delivered through Pearson VUE, either at a physical test center or through OnVUE online proctoring. The two modes have different rules, so confirm which you booked when you scheduled, and verify the rules days in advance — not at check-in.

Before you leave (or log in)

• Identification: Bring two forms of valid, unexpired ID, at least one government-issued photo ID, both bearing your signature, with names that exactly match your registration. A mismatched middle initial can void the appointment.
• Arrival: For a test center, arrive 15-30 minutes early for check-in, biometric palm scan, and locker storage. For OnVUE, run the system test the day before, clear your desk completely, and be ready 30 minutes early for the room scan.
• Voucher and confirmation: Have your CompTIA exam voucher applied and your Pearson VUE confirmation email handy.
• Prohibited items: No phones, smartwatches, notes, food, or drink in the testing room (unless an accommodation is approved). OnVUE forbids anyone else in the room and a second monitor.

During the exam

Read the task verb and the role before you look at the answer choices. CySA+ stems hinge on who you are and what phase you are in: "As the SOC analyst, what is the first action?" rewards a different answer than "What should be reported to leadership?" If two options are plausible, pick the one that follows the established process — for example, contain before you eradicate, and preserve evidence/chain of custody before you wipe a compromised host.

Use flagging deliberately. A flagged item is a pacing tool, not a failure. The classic mistake is burning four minutes on a flagged PBQ before you have even seen the easier MCQs that follow it. There is no penalty for guessing, so every item gets an answer before you submit — a blank is a guaranteed zero, while an educated guess on a four-option MCQ is a 25% chance of points.

A calm submit

When the review screen appears, sweep your flagged items, confirm nothing is blank, then submit. Most candidates receive a preliminary pass/fail result onscreen immediately, with the official scaled score and domain breakdown emailed afterward. Do not change answers in the final minute on a hunch — trust your first read unless you find a concrete misread of the stem.

The night before and the morning of

Lay everything out the night before: both IDs, the confirmation email, the test-center address with a parking/transit plan, or for OnVUE a tested webcam, a wired internet connection, and a fully cleared desk. Eat normally, hydrate before — not during — the appointment since there are no scheduled breaks in a standard 165-minute sitting, and set two alarms. The goal is to spend zero mental energy on logistics so all of it goes to analysis. Arriving rushed or with a mismatched ID is the single most avoidable way to lose an exam you studied months for.

Working the question types efficiently

The form mixes single-answer MCQs, multiple-response MCQs ("select all that apply" or "choose two"), and 2-4 PBQs. For multiple-response items, count the required selections and confirm you picked exactly that many — picking three when the stem says "choose two" is scored wrong. For PBQs, attack them step by step: read the scenario header, identify what the simulation is asking (order the incident-response phases, match indicators to ATT&CK tactics, prioritize CVSS findings, configure a SIEM rule), and complete the steps you are sure of first since PBQs award partial credit. A half-finished PBQ still scores; a blank one cannot.

A worked pacing scenario

Suppose the form has 82 items including three PBQs. Flag all three PBQs, then clear the 79 MCQs at about 90 seconds each, which consumes roughly 118 minutes and leaves about 47 minutes. Spend up to 12 minutes per PBQ (36 minutes), then use the final 10 minutes to revisit every flagged MCQ and confirm nothing is blank. This back-loaded plan banks the easy points early and protects you from the classic failure mode of running out of clock with a screen full of unanswered MCQs because one stubborn simulation ate the first half-hour.

After you click submit

Most candidates see a preliminary result instantly. Whatever it says, breathe before reacting — the official scaled score and the domain breakdown that follow by email are what you will actually use, whether to celebrate or to build a retake map. Resist the urge to immediately re-litigate questions from memory; the exam is under non-disclosure, and re-deriving answers afterward changes nothing about your result.