EDR · ~13 minutes
EDR/XDR Management · CrowdStrike + SentinelOne + Defender
Behavior vs signature · rollback · isolate host · LSASS detection · fileless · deployment + tuning. 18 questions.
How the exam works
- 18 questions · across 6 Bloom levels (Remember → Create)
- Each question has one correct answer · an explanation appears after you answer
- No time tracking · think for as long as you like
- At the end, a 6-axis radar + a program recommendation based on your weakest level
- If you choose to, you can save your result to your account and earn an achievement credential