OpenExamsFREE PRACTICE — ANY EXAM

Splunk Certified Cybersecurity Defense Engineer Exam — Information & Free Practice

US · Examination information

100 free questions · Answer explanations · No signup required

Start free practice →

Splunk Certified Cybersecurity Defense Engineer Exam

Provider
Pearson VUE
Format
Multiple choice; closed book; in-person test-center or online proctored delivery.
Exam questions
Total questions: 60.
Time limit
75 minutes, including 3 minutes to review the exam agreement.
Exam fee
$130 USD per exam attempt.
Examination outline
  • Data Engineering (10%)
    • Perform effective data review and analysis.
    • Create and maintain performant data indexing.
    • Understand and apply Splunk methods of data normalization.
  • Detection Engineering (40%)
    • Create and tune detections (i.e. Correlation Search).
    • Incorporate context into detections (i.e. Correlation Search).
    • Understand and create risk-based modifiers and detections.
    • Generate effective Notable Events/findings.
    • Create and maintain a detection lifecycle.
  • Building Effective Security Processes and Programs (20%)
    • Research, incorporate and develop threat intelligence.
    • Use common methodologies for risk and detection prioritization.
    • Generate documentation and standard operating procedures.
  • Automation and Efficiency (20%)
    • Develop automation and orchestration for standard operating procedures.
    • Optimize Case Management.
    • Describe and utilize REST APIs.
    • Automate responses using SOAR playbooks.
    • Compare and validate integrations and automation capabilities of Enterprise Security and SOAR.
  • Auditing and Reporting on Security Programs (10%)
    • Develop and optimize security metrics.
    • Build and populate effective security reports.
    • Build and populate dashboards for program analytics.
Examination sources

Related license preparation

This examination may be required or accepted as an alternative, depending on the license and application pathway.