- CHS-CY2 is the CodeHS Cybersecurity Level 2 certification, an online exam of 45 multiple-choice questions.
- You get a 90-minute timer and need 60% to pass.
- Five domains: Advanced Cryptography, Advanced Networking, Cyber Defense, Documentation, and Risk Management.
- No prerequisites exist, but CodeHS recommends the Advanced Cybersecurity course as preparation.
What CHS-CY2 Actually Is
CHS-CY2 is the shorthand for the CodeHS Cybersecurity Level 2 Certification. It is an online, timed, multiple-choice exam that CodeHS offers to students who have worked through intermediate-to-advanced cybersecurity material. If you landed here after searching for the acronym, it helps to be precise: this credential belongs to CodeHS, the computer science education platform used in many middle schools, high schools, and self-paced learning programs. It is a classroom-aligned certification, not a vendor credential tied to a specific product or a professional licensing body.
The "Level 2" label signals a step up from the Level 1 certification. Where an introductory exam checks that a student understands the basics of staying safe online and the fundamentals of security thinking, Level 2 asks you to reason about how encryption schemes differ, how network defenses are layered, how attacks are classified, how organizations document their security posture, and how risk is measured and answered. If you want the shortest possible answer to "what is this?", it is a skills check on the second tier of a structured cybersecurity pathway.
For readers who want the same question answered from a few different angles, the site also has dedicated explainers such as CHS-CY2 Meaning and What Does CHS-CY2 Stand For?, plus a broader overview in CHS-CY2 Certification.
Who Issues It and What the Credential Represents
The issuer is CodeHS. The official descriptions live in the CodeHS help center, specifically the Cybersecurity Level 2 Certification overview and the general Certifications FAQ. Those two pages are the authoritative reference for the exam's current topic list, format, and voucher rules, and they are worth bookmarking because CodeHS can revise its exam overview over time. The source version this article draws on is the Level 2 overview dated August 11, 2026, together with the Certifications FAQ.
It is worth being realistic about what the credential represents. A CodeHS certification demonstrates that you can handle a defined body of cybersecurity concepts at a particular depth under timed conditions. It is a credible, verifiable milestone for students building a record of technical learning, and it gives you something concrete to point to on a résumé, college application, or portfolio. It is not a substitute for hands-on professional certifications that employers use as hiring filters, and treating it honestly as a foundation-building step is the right framing. For more on the value question, see Is the CHS-CY2 Certification Worth It? Complete ROI Analysis 2026.
Exam Format at a Glance
The structure of the exam is straightforward, which is one of its advantages for candidates: there are few moving parts to worry about beyond the content itself.
| Feature | CHS-CY2 Detail |
|---|---|
| Issuer | CodeHS |
| Delivery | Online, timed exam |
| Question count | 45 multiple-choice questions |
| Time limit | 90-minute timer |
| Passing score | 60% |
| Prerequisites | None required; Advanced Cybersecurity course recommended |
| Attempt access | One voucher code per attempt |
| Validity | Certification expires after 10 years |
| Topic weighting | Topics published without percentage weights |
Two practical observations follow from these numbers. First, 90 minutes for 45 questions works out to a generous two minutes per question on average, so this is not a speed test. The challenge is accuracy and conceptual clarity, not racing the clock. Second, because the official materials publish the topics without percentage weights, you cannot safely assume that one domain matters more than another. Plan to be competent across all five. The details of how scoring thresholds work are covered in CHS-CY2 Passing Score 2026: Exactly What You Need to Pass.
The Five Exam Domains
CodeHS organizes the Level 2 exam into five content areas. Below is what each one asks of you, using the topic lists CodeHS publishes. For a deeper domain-by-domain breakdown, the companion piece CHS-CY2 Exam Domains 2026: Complete Guide to All 5 Content Areas goes further.
Domain 1: Advanced Cryptography
This domain moves past "encryption scrambles data" into how different families of ciphers and keys behave and why each exists.
- Block ciphers and transposition ciphers, and how each rearranges or transforms plaintext
- Symmetric versus asymmetric encryption, including the tradeoffs in key distribution
- Public key cryptography and how paired keys enable secure exchange
- Hash functions and what makes them different from encryption (one-way, integrity-focused)
- Digital certificates and how they bind identities to public keys
Domain 2: Advanced Networking
The broadest domain in terms of distinct vocabulary. Expect questions that ask you to match a device, protocol, or control to its purpose.
- Network devices: IDS, IPS, and UTM, and how detection differs from prevention
- Access control concepts
- Physical security such as biometrics and mantraps, plus environmental controls
- Ports and protocols, including the TCP versus UDP distinction
- Wireless protocols such as 802.11ac
- Private network concepts: DMZ, VPN, and MAC filtering
- Mobile device security
Domain 3: Cyber Defense
Here you classify threats and the defenses aimed at them.
- The relationship between threats, vulnerabilities, and exploits
- Malware types and prevention, including Trojans, worms, and rootkits
- Network attacks such as cross-site scripting, DDoS, and botnets
- Internal attacks and protections, including BIOS, UEFI, and DLP
Domain 4: Documentation
The least "technical" domain on its face, and the one students most often under-prepare for. It tests whether you understand the paperwork and process side of security.
- Change management
- Incident response plans
- Software licenses
- Data policy, privacy, and protection
Domain 5: Risk Management
This domain frames security as a decision-making discipline: find weaknesses, weigh them, respond sensibly, and verify.
- Types of vulnerabilities
- Risk assessment
- Risk response
- Penetration testing
Why Level 2 Is Not Level 1 Repeated
A common misunderstanding is that the Level 2 exam is simply a longer or harder version of the introductory exam. CodeHS is explicit that the exam topics are distinct from the recommended course curriculum and should not be replaced by Level 1 content. In practical terms, that means studying only introductory material will leave real gaps. Concepts like the difference between an IDS and an IPS, how a DMZ sits in a network design, or why a hash function is not encryption are Level 2 territory.
The flip side is reassuring: you do not need any prior certification to sit for this exam. There are no specific prerequisites. CodeHS recommends the Advanced Cybersecurity course as preparation, which is a recommendation, not a gate. If you are wondering whether you qualify to register at all, CHS-CY2 Requirements 2026: Eligibility, Prerequisites & How to Qualify walks through it.
Vouchers, Retakes, and Expiration
The registration mechanics are simple but have a few rules worth knowing before you start.
- Vouchers: Each exam attempt requires a voucher, and each voucher code is valid for one attempt only. You cannot reuse a code.
- Retakes: Students can retake the exam as needed, using a new voucher each time. A failed attempt is not a permanent lockout.
- Expiration: A certification you earn expires after 10 years, which is a long window for a credential at this level.
How you obtain a voucher, and whether your school or program supplies it, varies by setting, so confirm with your teacher or program administrator. The specifics on cost are broken down in CHS-CY2 Certification Cost 2026: Complete Pricing Breakdown, and scheduling windows are covered in CHS-CY2 Exam Dates 2026: Testing Windows, Deadlines & Scheduling.
Because retakes simply need a new voucher, the sensible mindset is to treat your first attempt seriously but not catastrophically. Still, a retake costs you another voucher and more time, so the better strategy is to arrive prepared. A timed practice run on the CHS-CY2 practice test before using a real voucher is a low-risk way to find out where you stand.
Who Should Take It
The natural audience is students who have completed or are completing the Advanced Cybersecurity coursework and want an external, standardized confirmation of what they learned. That includes high school students in a cybersecurity pathway, students building an application portfolio for computing or security programs, and self-directed learners using CodeHS as a structured curriculum.
It also suits people who learn better with a defined target. Because the exam has a fixed format, a published topic list, and a clear 60% pass line, it gives you an unambiguous finish line. If you are weighing whether the effort is proportionate, How Hard Is the CHS-CY2 Exam? Complete Difficulty Guide 2026 and CHS-CY2 Pass Rate 2026: What the Data Shows are good next reads. Note that CodeHS does not publish a headline pass rate in the sources cited here, so be skeptical of any article that quotes a precise figure without a source.
Where the Credential Leads
Let us be candid about career impact. CHS-CY2 is an educational credential. It signals genuine familiarity with core security concepts, and that is valuable as a stepping stone, but it does not by itself qualify someone for a professional security role. The realistic value is in what it supports:
- Academic pathways: Evidence of structured learning for college applications and computing or cybersecurity program admissions.
- Skill foundation: The five domains map closely onto what entry-level security and IT support roles expect you to be conversant in: networking basics, malware and attack types, incident handling, and risk language.
- Next-step certifications: The vocabulary you build here, including cryptography, ports and protocols, and risk response, carries directly into industry exams you may pursue later.
Roles where this foundation is relevant include IT help desk, junior security analyst trainee positions, and network support, though those employers will generally look for additional experience or industry credentials. For discussion of what employers and compensation look like in the broader field, see CHS-CY2 Jobs and CHS-CY2 Salary Guide 2026: Complete Earnings Analysis. No salary numbers are quoted here because the official CodeHS sources do not tie this exam to specific pay.
Key Takeaway
Treat CHS-CY2 as proof you can reason across cryptography, networking, defense, documentation, and risk, not as a standalone job ticket. Its best use is as a documented foundation that makes your next certification or course easier.
Planning Your Prep Around the Domains
Since the exam gives no percentage weights, an even spread of effort is the safest default, with extra time reserved for whichever domain feels least natural. A reasonable sequencing logic follows the way concepts build on each other. For a fuller methodology, the CHS-CY2 Study Guide 2026: How to Pass on Your First Attempt is the place to go, and the CHS-CY2 Cheat Sheet 2026: One-Page Review of Must-Know Facts works well for last-week review.
Advanced Cryptography
- Start here because hashing, keys, and certificates reappear in networking and risk questions
- Be able to explain why a hash is not encryption and when to use symmetric versus asymmetric
Advanced Networking
- Largest vocabulary load, so give it the most time
- Build a comparison sheet: IDS vs IPS vs UTM, TCP vs UDP, DMZ vs VPN
Cyber Defense and Documentation
- Pair attack types with the control that stops each one
- Do not skip change management and incident response plan stages
Risk Management and full review
- Distinguish risk assessment from risk response and penetration testing
- Finish with a timed run through the practice questions
The reasoning behind the order is simple: cryptography concepts underpin several later topics, networking is the heaviest lift so it gets a full week, and the process-oriented domains are easier to retain once you understand the technical scenarios they govern.
Frequently Asked Questions
It refers to the CodeHS Cybersecurity Level 2 Certification, an online exam from CodeHS covering advanced cryptography, networking, cyber defense, documentation, and risk management. It is not any other credential that happens to share a similar abbreviation.
The exam has 45 multiple-choice questions and a 90-minute timer. You need 60% to pass, so the time allowance is generous relative to the question count.
No specific prerequisites are required. CodeHS recommends the Advanced Cybersecurity course as preparation, but that is a recommendation rather than a requirement. Level 1 content should not be used as a replacement for the Level 2 topics.
You can retake the exam as needed. Each attempt requires a new voucher because each voucher code is valid for one attempt only, so it pays to prepare thoroughly before using one.
Certifications earned through CodeHS expire after 10 years. Check the CodeHS help center for the most current policy details, since the exam overview can be updated.
If you are ready to see where you stand, work through the full set of exam-style questions on the CHS-CY2 Exam Prep practice test site and use your weakest domain to guide the rest of your preparation.