NETFOR · ~15 minutes
Network Traffic Forensic Analysis · PCAP + Zeek + NetFlow
PCAP analysis · Wireshark/tshark · Zeek logs · NetFlow/IPFIX · JA3 · C2 beacon · DNS tunneling · data exfiltration reconstruction. 18 questions, 6 Bloom levels.
How the exam works
- 18 questions · across 6 Bloom levels (Remember → Create)
- Each question has one correct answer · an explanation appears after you answer
- No time tracking · think for as long as you like
- At the end, a 6-axis radar + a program recommendation based on your weakest level
- If you choose to, you can save your result to your account and earn an achievement credential