- Risk Management is the largest ATC domain at 33% - plan your heaviest study block around it.
- The exam has 100 questions (75 scored, 25 unscored) with a two-hour limit.
- Passing requires a scaled score of 650/800, not a percentage of raw answers correct.
- AT Standards and Training (29%) and Reporting and Reviewing (21%) together make up half the exam.
ATC Exam Domain Overview
The Antiterrorism Credential (ATC) is organized into four content domains that reflect the actual job responsibilities of Antiterrorism Officers across the Department of Defense and its supporting contractor workforce. Understanding how these domains are weighted - and what each one actually tests - is the single most useful thing you can do before you ever open a practice question. If you haven't already reviewed the baseline mechanics of the exam, our ATC Study Guide 2026 is a good companion piece to this domain breakdown.
Here is the official weighting you're working with:
| Domain | Weight | Approx. Scored Items |
|---|---|---|
| AT Planning | 17% | ~13 |
| Risk Management | 33% | ~25 |
| AT Standards and Training | 29% | ~22 |
| Reporting and Reviewing | 21% | ~15 |
Those approximate item counts are derived from the 75 scored questions on the exam; the additional 25 unscored questions are mixed in but not identifiable during the test, so treat every item you see as if it counts. For a deeper dive into how scoring translates into a pass or fail, see ATC Passing Score 2026.
Domain 1: AT Planning (17%)
AT Planning is the smallest domain by weight but it sets the foundation for everything else tested on the ATC. This domain covers the processes Antiterrorism Officers use to build, coordinate, and maintain antiterrorism plans at the installation or unit level.
AT Planning
Candidates must understand how AT plans are structured, who approves them, and how planning integrates with higher command guidance and local threat conditions.
- Components and required elements of a written AT plan
- Coordination between AT Officers, security personnel, and command staff
- How planning documents get reviewed, updated, and approved
- Integration of intelligence and threat information into planning cycles
Because this domain carries the lowest weight of the four, it should not consume a disproportionate share of your study time - but don't skip it. A handful of missed questions here can still be the difference between a scaled score above or below the passing threshold, a topic we unpack further in How Hard Is the ATC Exam?.
Domain 2: Risk Management (33%)
Risk Management is the largest domain on the ATC and deserves the largest slice of your preparation calendar. This domain tests your ability to identify threats, assess vulnerabilities, and apply risk-based decision-making to antiterrorism protection measures.
Risk Management
Expect scenario-based items that ask you to weigh threat, vulnerability, and criticality factors against available resources and mission requirements.
- Threat assessment methodology and how it feeds risk decisions
- Vulnerability assessment concepts and common protective gaps
- Criticality analysis of assets, facilities, and personnel
- How risk levels drive the selection of protective and mitigation measures
Because Risk Management touches nearly every other domain - you can't plan (Domain 1), train to a standard (Domain 3), or report accurately (Domain 4) without first understanding risk - many candidates find that strengthening this domain has a ripple effect on their performance across the whole exam. Multiple choice questions in this domain often present a short scenario followed by a "best next action" or "most significant risk factor" prompt rather than a simple definition recall question, so practice reading comprehension under time pressure matters as much as memorizing terminology.
Key Takeaway
Because Risk Management is worth roughly one-third of your scored questions, build your review calendar so this domain gets revisited more than once, not just covered in a single pass.
Domain 3: AT Standards and Training (29%)
AT Standards and Training is the second-largest domain and covers the policies, standards, and training requirements that govern the antiterrorism program itself - including how personnel are trained, certified, and held accountable to established benchmarks.
AT Standards and Training
This domain checks whether you understand the standards that antiterrorism programs must meet and how training requirements are structured and verified.
- Minimum AT standards applicable to installations and units
- Training requirements for personnel at different levels (including AT Level II concepts)
- Compliance verification and inspection processes
- Roles and responsibilities across the AT program chain
Since eligibility for the ATC itself requires completion of component AT Level II training, many candidates find this domain feels familiar - it draws directly on material you likely encountered during your own qualification process. If you're still confirming whether you meet the prerequisites to sit for the exam, review ATC Requirements 2026 before diving deeper into domain-specific study.
Domain 4: Reporting and Reviewing (21%)
Reporting and Reviewing rounds out the exam blueprint and focuses on how antiterrorism information flows - from incident reporting through after-action review and program evaluation.
Reporting and Reviewing
Candidates should be comfortable with the reporting chain for suspicious activity and incidents, as well as how AT programs are formally reviewed and assessed over time.
- Suspicious activity and incident reporting procedures
- After-action review processes following exercises or real incidents
- Program evaluation and self-assessment mechanisms
- Feedback loops that connect reviews back into planning and risk management
Notice how Domain 4 naturally connects back to Domain 1 (AT Planning) and Domain 2 (Risk Management) - reviews and reports are meant to feed back into planning updates and risk reassessments. The ATC exam rewards candidates who can see this cycle as a whole system rather than four isolated topics.
Question Format and Scoring Mechanics
The ATC exam consists of 100 multiple-choice questions, of which 75 are scored and 25 are unscored, delivered under a two-hour time limit at a Pearson VUE test center. You will not know which questions are scored and which are not, so pacing and consistency matter across the full 100 items.
Passing requires a scaled score of at least 650 out of 800 - this is not the same as answering 81.25% of raw questions correctly, since scaled scoring accounts for question difficulty and other psychometric adjustments. Don't try to reverse-engineer a "safe number of misses" using simple percentages; instead, focus on broad, consistent mastery across all four domains. Our detailed breakdown in ATC Passing Score 2026 explains why scaled scoring changes how you should think about "close calls."
Currently, the assessment is free to eligible candidates and their sponsoring organizations. For a full explanation of what "free" does and doesn't cover (travel, time, retake waiting periods), see ATC Certification Cost 2026. And if you're weighing whether pursuing the credential is worthwhile for your career track, Is the ATC Certification Worth It? covers that question in more depth, alongside ATC Salary Guide 2026 for career context.
Allocating Study Time Across Domains
Rather than studying domains in the order they're listed, allocate time proportional to their exam weight - with some overlap since the domains reinforce each other. A simple four-week structure built around the official weighting looks like this:
Risk Management Foundations
- Study threat, vulnerability, and criticality assessment concepts using the D-SEBOK materials in STEPP
- Work through scenario-based practice items, since this domain favors applied reasoning over recall
AT Standards and Training
- Review minimum AT standards and training requirement structures
- Connect this material back to your own AT Level II training experience
Reporting and Reviewing, then AT Planning
- Study incident reporting chains and after-action review processes
- Layer in AT Planning fundamentals, noting how plans get updated based on review findings
Integrated Review
- Take full-length timed practice sessions covering all four domains proportionally
- Revisit Risk Management a second time given its 33% weight
This kind of weighted, spaced review - rather than a single linear pass through the material - is one of the few generic study techniques worth borrowing here, and only because it maps directly onto the ATC's specific domain percentages. For a more exhaustive week-by-week plan, see ATC Study Guide 2026, and use our ATC Cheat Sheet 2026 for quick-reference review during your final week.
Who Actually Sits This Exam
The ATC is administered by the Center for Development of Security Excellence (CDSE), part of the Defense Counterintelligence and Security Agency (DCSA), as one credential within the SPēD certification program. Eligibility is limited to defense personnel and contractors serving in an Antiterrorism Officer role who have completed their component's AT Level II training and received component approval - no prior SPēD certification is required to attempt the ATC. If you're unsure whether your role or training history qualifies, our full ATC Requirements 2026 guide walks through eligibility step by step.
Because this credential is tied directly to an active Antiterrorism Officer function, most candidates are already working in or transitioning into AT-specific billets rather than pursuing the credential speculatively. That has implications for how you study: you're not learning antiterrorism concepts from zero, you're formalizing and testing knowledge tied to a role you may already be performing. For more on how the credential connects to job responsibilities and career paths, browse ATC Jobs and ATC Training.
If any of the terminology around the credential itself - rather than the exam domains - is still unclear, our foundational explainers cover the basics: What Is ATC?, ATC Meaning, and What Does ATC Stand For? are good starting points before you commit to a full domain-by-domain study plan. Once you're ready to test your domain knowledge, head over to our practice test platform to start working through realistic scenario-based questions modeled on the actual weighting described above.
FAQ
There's no fixed order, but many candidates start with Risk Management since it carries the highest weight at 33% and its concepts reinforce the other three domains.
No. The exam mixes 75 scored and 25 unscored questions among the 100 total items without indicating which is which, so every question should be treated as if it counts.
No, but you do need broad competency across all four since passing depends on a scaled score of 650/800 across the full 75 scored items, not perfection in any single domain.
A 90-day wait applies after a failed, missed, or incomplete attempt, and candidates are limited to eight sittings per credential, so use that time to target your weakest domains specifically.
CDSE provides Competency Preparatory Tools and the D-SEBOK through STEPP, both of which align with the four domains covered in this guide.