Free study resource
A free domain-by-domain map of the Security Blue Team Level 1 (BTL1) exam, with each domain's weighting and what to focus on. Use it to plan your study and spot gaps fast.
Built to mirror the real exam
The domains and percentages below follow the BTL1 exam's own breakdown, so the practice you do here is weighted the way the exam is weighted — you spend your time where the marks actually are, instead of studying every topic equally.
CyberCertPrep is an independent study resource and is not affiliated with or endorsed by any certification body.
Core concepts, terminology, and the high-yield ideas behind Security Fundamentals. This domain carries roughly 12% of the BTL1 exam, so weight your study accordingly.
Core concepts, terminology, and the high-yield ideas behind Phishing Analysis. This domain carries roughly 16% of the BTL1 exam, so weight your study accordingly.
Core concepts, terminology, and the high-yield ideas behind Threat Intelligence. This domain carries roughly 12% of the BTL1 exam, so weight your study accordingly.
Core concepts, terminology, and the high-yield ideas behind Digital Forensics. This domain carries roughly 14% of the BTL1 exam, so weight your study accordingly.
Core concepts, terminology, and the high-yield ideas behind SIEM and Monitoring. This domain carries roughly 14% of the BTL1 exam, so weight your study accordingly.
Core concepts, terminology, and the high-yield ideas behind Log Analysis. This domain carries roughly 12% of the BTL1 exam, so weight your study accordingly.
Core concepts, terminology, and the high-yield ideas behind Incident Response. This domain carries roughly 12% of the BTL1 exam, so weight your study accordingly.
Core concepts, terminology, and the high-yield ideas behind Network Traffic Analysis. This domain carries roughly 8% of the BTL1 exam, so weight your study accordingly.
Drop your email and we'll send the complete per-domain summary pack and a suggested study plan for BTL1, free.
No spam. Unsubscribe anytime.