BTL1

It is a practical incident response exam delivered over a 24-hour window, with immediate grading and feedback. Rather than multiple-choice recall, it asks you to work through hands-on defensive tasks using a subset of the tools taught in the course, similar to a real incident response engagement. Detailed feedback is provided to help you improve.

The vendor gives two figures: approximately 30 hours estimated time to complete on the course page, and typically between 40 and 50 hours in the FAQ. Actual time varies with prior knowledge, working speed, and available study hours. Plan for the higher end if you are new to blue team tooling.

Yes. The price includes one free exam resit voucher, and additional resits can be purchased. The vendor reports that over 99% of students who use their free retake pass, so a first-attempt failure is not the end of the road. Detailed feedback from the first attempt helps target your revision.

The price includes 4 months of on-demand access to 330+ lessons, videos, activities, and quizzes, plus 23 browser labs providing 100 hours of access. It also includes the 24-hour practical exam with immediate grading and feedback, one free resit voucher, and on passing: lifetime certification, digital and printed certificates, a Credly badge, and a challenge coin.

Work through the course in the order presented, since later modules build on earlier ones. Complete every lab rather than reading passively, because the labs are explicitly designed to prepare you for the practical exam. Give extra time to the five core domains: phishing analysis, threat intelligence, digital forensics, SIEM, and incident response.

Skipping labs and relying on video watching is the biggest risk, since the exam is practical and the vendor warns there is nothing tested that the course does not cover. Other pitfalls include weak time management during the 24-hour window, unfamiliarity with the specific tools, and poor note-taking that slows investigation.

No. The vendor states there are no entry requirements for the exam and you can take it whenever you feel ready, though completing all the labs first is strongly recommended. The course is aimed primarily at entry-level and junior roles, with a recommended experience level of 0-2 years.

Training and exam price is listed at £399.00 GBP, with VAT invoices only available through the corporate sales team. A 10% discount is available to verified students actively studying at an established educational institute, and discounts also exist for military personnel, first responders, and veterans. Corporate discounts depend on license volume.

Certification is for life. You receive a digital PDF certificate, a printed certificate, a Credly digital badge, and a challenge coin. The coin is silver by default and gold if you score 90% or higher on your first attempt, which gives strong candidates an extra incentive to prepare thoroughly before sitting the exam.