283 questions with instant explanations, domain breakdown, and wrong-answer analysis. Built for the real exam.
This is exactly what you see during practice — question, options, and a full explanation after you answer.
Which phase of the Cyber Kill Chain is most effectively mitigated by implementing strict egress filtering on your firewall?
Strict egress filtering on the firewall blocks outbound connections from compromised hosts to attacker-controlled infrastructure, which directly disrupts the Command and Control (C2) phase of the Cyber Kill Chain. Without C2, the attacker cannot issue commands, exfiltrate data, o…Read full explanation
An analyst needs to correlate an alert with the 'Delivery' phase of the Cyber Kill Chain. Which data source should be most prioritized for this specific stage?
The Delivery phase of the Cyber Kill Chain covers how the attacker transmits the weaponized payload to the victim — typically via email attachments, malicious links, or drive-by downloads. Email gateway logs capture delivery attempts (attachments, sender reputation, URL clicks), …Read full explanation
Your organization is adopting the CIS Controls v8. You are using Splunk to track 'Inventory and Control of Enterprise Assets'. Which Data Model is essential for this visibility?
The Assets and Identity Data Model is the Splunk Common Information Model (CIM) data model that normalizes asset inventory and identity information — hostnames, IPs, MAC addresses, OS details, and user identities. CIS Control 1 (Inventory and Control of Enterprise Assets) require…Read full explanation
Questions are tagged by exam domain. Practice a specific domain or mix them all.
Answer at your own pace. Explanation and domain tag shown immediately after each answer.
Countdown timer starts immediately. Results and domain scores shown at the end — just like the real exam.
Full explanations on every question
Not just the right answer — you get exactly why each wrong option is wrong, so you learn the concept, not the answer.
Domain score breakdown
After each session see your score by exam domain so you know exactly where to focus study time.
100% free, forever
No subscription, no trial, no email wall. Start a session in under 10 seconds.
Exam-style questions
Scenario-based, precise wording, realistic distractors — written to match what you actually see on exam day.