CREST CCT study plan

Map the CREST CCT exam structure and weighting across all four domains onto a one-page outline you write yourself

Draft a personal scoping checklist covering rules of engagement, authorization boundaries, and escalation contacts

Define a repeatable assessment methodology (reconnaissance, enumeration, validation, exploitation, retest) and justify each stage in writing

List the evidence artifacts you must capture per finding (request/response, timestamps, reproduction steps) and start a template

Classify common vulnerability families by root cause (injection, broken access control, misconfiguration, cryptographic weakness) with one original example each

Practice writing a false-positive triage decision for five ambiguous observations

Explain how to assign severity using a documented scoring approach and defend each rating in two sentences

Build a test plan for a deliberately vulnerable lab target you control, including objectives, constraints, and stop conditions

Execute reconnaissance and enumeration against that lab target and record raw output

Correlate enumerated services to candidate vulnerabilities and rank them by likely impact

Document at least three validated findings with reproduction steps

Perform controlled exploitation against your lab target for the three highest-ranked findings, staying within your written rules of engagement

Record before-and-after proof for each exploit without causing unnecessary damage or data loss

Document one exploitation attempt that failed and explain the hypothesis and why it was wrong

Write remediation advice for each exploited issue that a developer could act on directly

Convert your lab findings into a draft report with executive summary, technical detail, and risk narrative

Rewrite three technical findings for a non-technical audience without losing accuracy

Structure a retest section that states what would prove each fix effective

Draft a short verbal briefing script for a client stakeholder summarizing the top three risks

Identify and describe at least five professional conduct scenarios (scope creep, handling sensitive data, disclosure pressure, conflicts of interest, reporting bad news) and the correct response to each

State how you would handle discovering evidence of a prior breach outside your scope

Apply data-handling rules to your own lab evidence: storage, retention, and secure destruction

Peer-review your draft report against a checklist you write for clarity, accuracy, and evidence traceability

Run a timed end-to-end mock engagement in a fresh lab environment, from scoping through report delivery

Track your time per phase and compare it to your week 1 methodology

Identify your three weakest areas from the mock and write a targeted remediation plan for each

Re-rate every finding for severity consistency across the whole report

Re-drill the three weakest areas identified in week 7 with focused lab repetitions

Practice explaining two findings aloud in under two minutes each, as if to a client

Finalize your reusable methodology, evidence, and report templates for exam-day use

Complete a final self-assessment against all four domain weightings and confirm readiness or deferral