Security Analyst
Detect, triage and respond — the ladder most SOC and blue-team roles are recruited against.
This is an order, not a shopping list. Each step assumes the one above it. Sitting a professional-level paper before you have the hands‑on months behind you produces a low score and no useful diagnosis — the questions test judgement you have not had the chance to build yet.
One entry pack for each of the 9 exams priced here, bought as you reach them — nothing renews, and there is no discount for buying them together.
Start here
3 examsCore
3 examsGo deeper
3 examsThe Security Analyst ladder is 9 exams. Sat end to end that is about 20.6 hours of exam time, which is the part most plans underestimate: the reading is not the constraint, the clock is. The order is not decoration. Each stage assumes the vocabulary of the one before it, so sitting them out of sequence usually means learning the same material twice — once badly, in the wrong context.
| Mock test | Version | Questions | Minutes | Delivery |
|---|---|---|---|---|
| CompTIA Security+ | SY0-701 (V7) | 90 | 90 | Fixed form |
| ISC2 Certified in Cybersecurity (CC) | CC | 100 | 120 | Fixed form |
| Microsoft Security, Compliance, and Identity Fundamentals (SC-900) | SC-900 (skills measured as of July 28, 2026) | 50 | 100 | Fixed form |
| Cisco CCNA Cybersecurity | 200-201 CCNACBR v1.2 | 100 | 120 | Fixed form |
| CompTIA Cybersecurity Analyst (CySA+) | CS0-004 (V4) | 85 | 165 | Fixed form |
| Microsoft Security Operations Analyst (SC-200) | SC-200 (skills measured as of July 28, 2026) | 50 | 100 | Fixed form |
| ISACA Certified Information Security Manager (CISM) | CISM (through 2026-11-02) | 150 | 240 | Fixed form |
| ISC2 Certified Information Systems Security Professional (CISSP) | CISSP (outline 2024-04-15) | 100 | 180 | Adaptive |
| ISC2 Systems Security Certified Practitioner (SSCP) | SSCP | 100 | 120 | Adaptive |
What a Security Analyst mock test gives you
The published blueprint, not an approximation
The question count, the time limit and the weight of each domain are read from each awarding body’s own exam guide. If a domain is worth 30% of the real paper, it is worth 30% of the mock test.
A score report that names the weak domain
Every mock test ends with a per-domain breakdown against the official weighting, and the reasoning for each item you got wrong — including why the answer you picked was wrong, not only why the right one was right.
A different paper each time
Sitting a second mock test does not mean seeing the same questions again. Each is drawn fresh against the blueprint, so a repeat measures preparation rather than recall.
Real timing, including the pressure
The clock, the question palette, flagging and review all behave as they do in the exam room. Running out of time in a mock test is the cheapest way to find out you would have run out of time.
Questions people ask
Do I have to sit these in order?
No, but the ladder is built the way it is because each stage assumes the one before it. Skipping ahead usually means covering the same ground twice.
How much exam time is the whole security analyst path?
About 20.6 hours across 9 papers, not counting the preparation between them. Practising against the real clock is the only way to find out whether that is realistic for you.
Can one pack cover the whole path?
A pack is bought against a category, and a path can cross categories. The pricing page shows which category each exam belongs to.
Sit a Security Analyst mock test
Start with a pack of full-length papers and the reports that come with them. If the difficulty is not what you need, you have spent very little finding that out.
Create an accountSee pack pricing