Test cloud evidence, identity threats, third-party exposure, software dependencies and trusted-release decisions.
Focused challenges designed to test judgment, evidence handling and defensible security decisions.
Pick a focused route instead of searching through internal categories and advisory tags.
Choose a focused assessment aligned with practical course material, from security awareness and cloud security to incident response and software supply chains.
8 assessments Work from sources Investigate real threat reportingUse advisories, standards and technical documentation to answer evidence-led questions without overstating what the sources prove.
62 assessments Think like an analyst Test your intelligence tradecraftAssess requirements, evidence evaluation, analysis, structured intelligence, actor profiling and decision-focused communication.
17 assessments Detect and respond Practice operational security decisionsChallenge your judgment across threat hunting, alert triage, detection engineering, incident reconstruction, forensics and recovery.
22 assessments Protect modern systems Assess trust across connected systemsTest cloud evidence, identity threats, third-party exposure, software dependencies and trusted-release decisions.
28 assessments Follow the operation Trace malicious behavior and infrastructureAnalyze malware behavior, ransomware operations, command infrastructure, delivery chains and defensible investigative pivots.
53 assessmentsAssess practical cloud-security judgment across responsibility, boundaries, configuration, telemetry, resilience, workload runtime, SaaS governance, and connected applications.
Review Cloud Security Foundations: Applied Decisions ExamAssess practical software supply-chain decisions from component inventory and dependency acquisition to build integrity, response, developer environments, and adoption.
Review Software Supply Chain Security Foundations: Trusted Release ExamAssess incident-response judgment across preparation, triage, evidence, scoping, containment, communication, recovery, identity compromise, cloud control incidents, and ransomware.
Review Incident Response Foundations: Evidence-Led Decisions ExamTest whether you can reason across the complete detection engineering lifecycle. The assessment covers requirements, hypotheses, telemetry semantics, ATT&CK interpretation, analytic design, validation, health monitoring, alert operations, portable content, cloud and identity systems, endpoint and network evidence, software supply chains, AI agents, deception, and cyber-physical environments.
Review Detection Engineering: Evidence, Analytics, and Operations AssessmentAn advanced professional exam testing knowledge of systemic ransomware recovery, Minimum Viable Factory Recovery (MVF), and critical-infrastructure cyber resilience based on real-world incidents and academic frameworks.
Review Systemic Ransomware Recovery and Cyber ResilienceAn expanded case-based assessment of TDS mechanics, named services and campaigns, networks, bulletproof hosting, evidence, detection, and disruption.
Review Traffic Distribution Systems in Cybercrime ExamTest your ability to analyze phishing and social-engineering campaigns through lure themes, delivery chains, sender infrastructure, credential capture, payload staging, audience targeting, campaign clustering, and defensive intelligence.
Review CTI Phishing Campaigns & Social Engineering AnalysisTest your ability to analyze credential theft, session hijacking, MFA abuse, identity-provider compromise, privileged access, credential marketplaces, authentication telemetry, and identity-centered adversary tradecraft.
Review CTI Identity Threats & Access TradecraftTest your ability to assess software, service-provider, dependency, and vendor compromise scenarios using relationship mapping, upstream evidence, blast-radius analysis, trust paths, prioritization, and third-party intelligence requirements.
Review CTI Supply Chain & Third-Party Threat AnalysisTest your ability to produce threat intelligence for cloud and SaaS environments, including identity-centric intrusion paths, control-plane activity, tenant context, exposed credentials, shared responsibility, cloud-native telemetry, and cross-tenant campaigns.
Review CTI for Cloud & SaaS ThreatsThis comprehensive exam assesses foundational knowledge in cybersecurity as of 2026, covering emerging threats like AI-driven attacks, quantum computing risks, post-quantum cryptography, zero-trust architecture, supply chain security, cloud-native vulnerabilities, and regulatory updates (e.g., NIS2, DORA). It includes 15 multiple-choice and true/false questions designed for professionals seeking to validate their understanding of modern cyber defense strategies.
Review Cybersecurity Essentials 2026: Emerging Threats and DefensesUse official reporting to distinguish normal Exchange Online access from forged-token activity and choose logging and retention measures that preserve investigative evidence.
Review AA23-193A Outlook Online Audit InvestigationInvestigate a vulnerability chain against Ivanti EPMM and use API, log, user-agent, certificate, and webshell evidence to design defensible hunting conclusions.
Review AA23-213A Ivanti EPMM Forensic HuntingTrace Scattered Spider from helpdesk impersonation and MFA transfer through legitimate remote tools, credential stealers, AWS discovery, Snowflake collection, response monitoring, and ESXi impact.
Review AA23-320A Scattered Spider Helpdesk-to-Cloud Intrusion AnalysisTrace Star Blizzard from open-source persona research and rapport building through Evilginx session theft, personal-email targeting, mailbox collection, and follow-on phishing.
Review AA23-341A Star Blizzard Persona-to-Session Spearphishing Analysis
