Skip to main content

Format and Domains Covered

Updated today

Format and Domains Covered

Exam Format

  • Type of Questions: Text-based, practical multiple-choice questions based on a real-world scenario. No report submission is required.

  • Duration: 5 hours.

  • Exam Access: Students will have access to a browser-based lab machine, a SIEM instance, and an AWS environment for the duration of the exam, providing a realistic and practical testing environment. No tools or VPN setup is required.
    ​


Domains Covered

The CCDL1 exam encompasses a wide range of cybersecurity domains to ensure a comprehensive assessment of your skills. These domains include:

  1. SOC & Threat Intelligence Foundations

  2. Network & Endpoint Essentials

  3. SIEM Basics

  4. Phishing & Email Security

  5. Digital Forensics and Incident Response

  6. Cloud Security & AI


Open Book Policy

You are free to use your learning resources, browse the internet on your host, and refer to notes taken during the exam. This policy is designed to simulate a real-world environment where resources are available to solve complex problems.

Did this answer your question?