DoD 8140 Certifications: System Testing and Evaluation Specialist (671)

Plans and conducts system tests, evaluates results against requirements and reports the findings.

Validates knowledge of securing cloud environments, including architecture, data, platforms, applications, operations and cloud legal and compliance requirements.

734Has prerequisites

Approved DoD levels: Basic · Intermediate · Advanced

Certified Ethical Hacker credential artwork

Certified Ethical Hacker (CEH)

EC-Council · Exam 312-50

Validates knowledge of attacker tools and techniques, including reconnaissance, system, network, web, wireless and cloud attacks, and cryptography.

1,050Has prerequisites

Approved DoD levels: Basic · Intermediate

CyberSec First Responder credential artwork

CyberSec First Responder (CFR)

CertNexus · Exam CFR-410

Validates knowledge of identifying, detecting, responding to and recovering from cybersecurity threats using the NIST Cybersecurity Framework.

367.50No prerequisites

Approved DoD levels: Basic · Intermediate

CompTIA Cloud+ credential artwork

CompTIA Cloud+

CompTIA · Exam CV0-004

Validates knowledge of cloud architecture, deployment, operations, security, DevOps fundamentals and troubleshooting across multi-vendor cloud environments.

399No prerequisites

Approved DoD levels: Basic · Intermediate

CompTIA Network+ credential artwork

CompTIA Network+

CompTIA · Exam N10-009

Validates knowledge of networking concepts, implementation, operations, security and troubleshooting for managing and supporting modern networks.

399No prerequisites

Approved DoD levels: Basic

CompTIA PenTest+ credential artwork

CompTIA PenTest+

CompTIA · Exam PT0-003

Validates practical skills in planning, performing and reporting penetration tests, from scoping and reconnaissance to exploitation and post-exploitation.

439No prerequisites

Approved DoD levels: Basic · Intermediate

CompTIA Security+ credential artwork

CompTIA Security+

CompTIA · Exam SY0-701

Validates knowledge of security threats, protective controls, risk management and incident response across modern IT environments.

439No prerequisites

Approved DoD levels: Basic · Intermediate

Validates knowledge of access control, networking, cryptography, Linux and Windows security, cloud security and incident handling.

999No prerequisites

Approved DoD levels: Basic · Intermediate

Validates practical skills in implementing access controls, monitoring risk, responding to incidents and securing networks, systems and applications.

384Has prerequisites

Approved DoD levels: Basic · Intermediate

Choosing a certification for DoD 8140

What does DoD proficiency mean?

Use the DoD proficiency required for your work role by the employer or supervisor. It describes the work, not the difficulty of a certification.

  • Basic: routine work with guidance.
  • Intermediate: less routine work with periodic guidance.
  • Advanced: complex work with little guidance.

A higher approved level also satisfies lower levels for the same role. Leave the filter at “Any proficiency” if you do not know the requirement.

What does certification approval cover?

A certification meets only the relevant foundational qualification option; on-the-job qualification, environment-specific requirements and continuing development are separate.

Sources and scope

Explicit certification mappings come from the official DoD 8140 qualification matrix v2.1, effective September 19, 2025 and checked October 17, 2026. Rows marked pending OPR validation are excluded. This directory covers the credentials in CertUp, not every qualification option in the matrix.

Confirm the work role, proficiency and accepted qualification with the employer or supervisor before choosing a credential. See the official document library for current policy and guidance.