Exams Organizations How it works Pricing Help & FAQ

Sign in Start free

SPLUNK

Splunk Certified Cybersecurity Defense Architect

CYBERSECURITY-DEFENSE-ARCHITECT

The Splunk Certified Cybersecurity Defense Architect certification validates your ability to architect and scale enterprise-grade security defenses. Designed for seasoned professionals, it demonstrates expertise in advanced security data management, automation, and risk-aligned strategies. Earn this credential to distinguish yourself as a strategic leader who can mature an organization's security posture and align complex security capabilities with business goals.

Practice Free Questions

8Domains

39Objectives

206Practice pages

979Free questions

CYBERSECURITY-DEFENSE-ARCHITECT free practice questions

Choose any objective and open any question page — no sign-in required.

Develop and implement customized threat intelligence strategies, including both open source and commercial intelligence providers.

25 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–25

Integrate threat intelligence, including all aspects of the lifecycle (evaluation, curation, maintenance, sources, confidence scoring, etc.), into broader security operations.

35 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35

Integrate intelligence-informed advanced adversary emulation and threat modeling.

17 questions · 4 pages

Questions 1–5 6–10 11–15 16–17

Explain how to develop and implement integration strategies for data-driven security operations.

30 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30

Identify data sources critical to cybersecurity operations, such as event sources, identity directories, asset management systems, and vulnerability - assessments. This can include non-security data sources, eg. observability tools.

28 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–28

Identify high value / high signal / high noise data sources (e.g. Windows process vs EDR process flow, or network/VPC flow vs packet capture) and how they support security operations use cases.

25 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–25

Identify strategies to monitor an environment that requires nonstandard or out-of-band instrumentation and sensors, e.g. legacy data sources, OT/IC infrastructure environments.

19 questions · 4 pages

Questions 1–5 6–10 11–15 16–19

Develop a data lifecycle management strategy, including retention, storage tiering, summarization, data residency, and access control.

15 questions · 3 pages

Questions 1–5 6–10 11–15

Describe the value of data normalization in order to support integration into cybersecurity defense programs, such as security monitoring and threat hunting, e.g. with CIM, CEF.

33 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–33

Implement security analytics strategies beyond traditional SIEM such as advanced techniques like data science, machine learning, behavioral analysis, and AI.

24 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–24

Explain how cybersecurity defense data architectures scale using technologies and capabilities such as data mesh, data lakes, message bus, message routing, and federated search.

25 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–25

Align cybersecurity incident response with an organizations incident management, change management, and other ITSM/ITIL processes.

28 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–28

Develop a process to manage, coordinate, and communicate responses to large-scale security incidents.

30 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30

Ensure appropriate technologies and processes are in place to support various forensics investigations.

20 questions · 4 pages

Questions 1–5 6–10 11–15 16–20

Develop scalable strategies for agile and DevOps-driven cybersecurity defenses, such as detection as code.

21 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–21

Describe how to integrate security sensors and controls into DevOps workflows.

25 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–25

Describe how to create and leverage a SBOM (Software Bill of Materials) in cybersecurity defenses.

30 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30

Describe continuous integration & deployment strategies for security data management and engineering solutions.

20 questions · 4 pages

Questions 1–5 6–10 11–15 16–20

Describe how to develop and implement patterns, architecture blueprints, and paved roads to enable cybersecurity defenses to scale.

30 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30

Understand how application and infrastructure architectures support cybersecurity defenses.

25 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–25

Explain how governmental directives and regulations guidance publications like NIST CSF help influence the design of defense capabilities.

27 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–27

Explain how industry standard security frameworks (PCI, HIPAA, OT/IC, others) affect cyber defense architecture.

30 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30

Define how security controls contribute to business operating cost and offsetting risk.

22 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–22

Explain how security technologies and controls fit into the organizations Governance, Risk, and Compliance program and overall risk management.

23 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–23

Identify organizational coverage for prevention, detection, response and recovery capabilities.

30 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30

Determine how coverage gaps can be mitigated by architecture changes, config changes, or process changes.

29 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–29

Affect organizational and company priorities and budgets based on key capabilities required for security that are aligned to security and business goals.

25 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–25

Explain methodologies used to select security technologies aligned to business need, organizational technology landscape, and security controls.

17 questions · 4 pages

Questions 1–5 6–10 11–15 16–17

Define technology implementation strategies to provide desired capabilities.

16 questions · 4 pages

Questions 1–5 6–10 11–15 16–16

Ensure that resilient solutions aligned to the business and operational requirements are selected and deployed.

21 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–21

Want a smarter study session?Try adaptive questions aimed at your weak spots, the illustrated book, and readiness you can trust.

Continue Free Practice

Percentages reflect share of the current practice bank, not official exam weightings. Every page above is a live, crawlable practice page (39 objectives · 206 pages).