FirstTry
Cybersecurity Defense AnalystSplunk Certified Cybersecurity Defense Analyst

Practice Exam 1

5 of this form’s 66 questions, drawn from across its domains, free. The explanation on every one of them is free too, at every tier, and always will be.

  1. Question 1 of 5

    1-3The Cyber Landscape, Frameworks, and Standards

    An analyst is asked how NIST defines a vulnerability. Which description matches?

  2. Question 2 of 5

    2-4Threat and Attack Types, Motivations, and Tactics

    An analyst is told some Enterprise Security annotations ship by default and others do not. Which term does Splunk use for the shipped ones?

  3. Question 3 of 5

    3-2Defenses, Data Sources, and SIEM Best Practices

    An engineer asks which file the asset and identity merge writes its output to. Which one does Splunk name as a target lookup table?

  4. Question 4 of 5

    4-6Investigation, Event Handling, Correlation, and Risk

    An analyst asks how the aggregated risk score for a user is arrived at under risk-based alerting. What does Splunk document?

  5. Question 5 of 5

    5-2SPL and Efficient Searching

    An analyst asks which of stats, sort, dedup and eval Splunk classifies as streaming. Which one is named as streaming?

0 of 66 completed

0%

The other 61 questions are the rest of this form: same 75 minute clock, same 750 cut score, and the same explanation on every question, which is never behind the wall. Practice Exam 1 of 2 on Cybersecurity Defense Analyst.

What this exam covers

  • The Cyber Landscape, Frameworks, and Standards7 questions / 10% of the exam
  • Threat and Attack Types, Motivations, and Tactics13 questions / 20% of the exam
  • Defenses, Data Sources, and SIEM Best Practices13 questions / 20% of the exam
  • Investigation, Event Handling, Correlation, and Risk13 questions / 20% of the exam
  • SPL and Efficient Searching13 questions / 20% of the exam
  • Threat Hunting and Remediation7 questions / 10% of the exam

Checking what you already have access to.

Every question is original, written from the published objectives. We never reproduce, paraphrase, or imitate real exam content, and neither should anything else you study from.