Certification guide
Cybersecurity Defense ArchitectSplunk Certified Cybersecurity Defense Architect: the honest guide
Everything Splunk publishes about Cybersecurity Defense Architect, in one place: what the exam asks, how the domains are weighted, and what it takes to be ready.
This guide page is built from the registry, not written yet.
Everything below comes from Cybersecurity Defense Architect’s published exam data, and every figure links to the vendor page it came from. The researched version, with study plans and the parts nobody publishes, is still being written. This page is not submitted to search engines until it is.
Practise Cybersecurity Defense Architect questions in the meantimeWhat the exam actually asks you to do
67 multiple choice questions and nothing else. Splunk sets no lab and no simulation on this exam, so the practice that matters is reading a scenario and choosing well under the clock.
Item formats
- Multiple choice
Nothing here needs a lab. Reading carefully and eliminating options is the whole skill. Splunk, Splunk Certified Cybersecurity Defense Architect certification track ↗
Domain breakdown and official weightings
From the official Splunk certification tracks. Security Data Management is the heaviest domain at 20 percent, followed by Scaling Cybersecurity Defenses and DevSecOps at 15 percent.
- Advanced Threat Intelligence and Analysis5%
- Security Data Management20%
- Advanced Incident Response and Management10%
- Advanced Automation and Orchestration10%
- Scaling Cybersecurity Defenses and DevSecOps15%
- Governance, Risk, and Compliance10%
- Measuring and Improving Security Program Effectiveness15%
- Security Capability Selection, Placement, Configuration15%
Where to focus: Security Data Management is the single heaviest section at 20%. Scaling Cybersecurity Defenses, Measuring Security Program Effectiveness and Security Capability Selection are 15% each, so architecture and measurement outweigh incident work here.
What comes after passing
Cybersecurity Defense Architect is valid for 3 years. All Splunk certifications run a three year life cycle from the date of the highest certification exam passed. Splunk stopped renewing certifications through coursework on 1 March 2026, so renewal now means either retaking the same exam in the final year of the window or earning a higher level certification in the same track. Splunk says a certification you let lapse is marked inactive, and that you then restart the programme at the Splunk Core Certified Power User level.
Costs across the full renewal cycle are on the Cybersecurity Defense Architect cost page.
Frequently asked questions
How much does the Splunk Certified Cybersecurity Defense Architect exam cost?
Splunk lists the exam at $130 USD per exam attempt and delivers it through its testing partner Pearson VUE, at a test centre or with an online proctor. A retake costs the same $130 again.
How long is the exam and how many questions does it have?
Splunk publishes 67 multiple choice questions in 75 minutes. Splunk notes on the test blueprint that the 75 minutes include three minutes to review the exam agreement, so the working time is 72.
What is the passing score?
Splunk publishes no passing score for this exam, and no exam code either. It states the question count, the time limit and the section weightings on its test blueprint and stops there, so any percentage you see quoted elsewhere is somebody's estimate rather than Splunk's number.
What do I need before I can sit it?
Splunk lists no prerequisite for this exam. Anyone can register for it.
Keep reading
Cybersecurity Defense Architect practice questions
Free sample questions with the full explanation on every answer.
Free Cybersecurity Defense Architect practice test
Ten real questions, playable now. No account, no card.
Cybersecurity Defense Architect exam objectives
The full official blueprint, with practice pages on covered objectives.
Cybersecurity Defense Architect passing score
The exact cut score, what kind of number it is, and the retake terms.
How hard is Cybersecurity Defense Architect?
An honest difficulty read from the format, the clock and the weights.
Practise Cybersecurity Defense Architect for free while you decide
Original questions written from the published objectives, with the concept, the reasoning, and a note on every wrong option. No account needed to start.
Start free Cybersecurity Defense Architect questions