OpenExamsFREE PRACTICE — ANY EXAM

Splunk Certified Cybersecurity Defense Analyst — Information & Free Practice

US · Examination information

100 free questions · Answer explanations · No signup required

Start free practice →

Splunk Certified Cybersecurity Defense Analyst

Provider
Pearson VUE
Format
Closed-book multiple choice examination, delivered at a Pearson Test Center or with online proctoring.
Exam questions
Total questions: 66.
Time limit
75 minutes total, including 3 minutes to review the examination agreement.
Exam fee
$130 USD per examination attempt.
Examination outline
  • The Cyber Landscape, Frameworks, and Standards (10%)
    • SOC organization and Analyst, Engineer and Architect roles
    • Cyber controls, standards, frameworks and their incorporation in Splunk
    • Information assurance, confidentiality, integrity, availability and basic risk management
  • Threat and Attack Types, Motivations, and Tactics (20%)
    • Common attacks and attack vectors
    • Common attack, adversary and security terminology
    • Threat intelligence tiers and application to threat analysis
    • Purpose and scope of annotations in Splunk Enterprise Security
    • Tactics, techniques and procedures
  • Defenses, Data Sources, and SIEM Best Practices (20%)
    • Cyber defense systems, analysis tools and threat analysis data sources
    • SIEM best practices and Enterprise Security operation, CIM, data models, acceleration, assets and identities
    • Assessing data sources and finding sourcetype content with Security Essentials and Enterprise Security
  • Investigation, Event Handling, Correlation, and Risk (20%)
    • Continuous monitoring and Splunk's five investigation stages
    • Analyst performance metrics
    • Recognizing and assigning event dispositions
    • Enterprise Security terms and their uses
    • Built-in Enterprise Security dashboards and their information
    • Risk Based Alerting, the Risk framework and correlation searches
  • SPL and Efficient Searching (20%)
    • Common SPL terms and their security analysis uses
    • Best practices for efficient searches
    • SPL resources in Enterprise Security, Security Essentials and Splunk Lantern
  • Threat Hunting and Remediation (10%)
    • Threat hunting techniques
    • Long tail analysis, outlier detection and hypothesis hunting
    • Using and configuring adaptive response actions
    • SOAR playbooks and triggering from Enterprise Security
Examination sources

Related license preparation

This examination may be required or accepted as an alternative, depending on the license and application pathway.