EVIDENCE · NOT SCORES
SIGN IN

How it works

You know the exam. This is the practice around it.

You set up three facts: which certification, your exam date, and how many hours you have in a week. Everything after that is built from the exam’s published outline and recorded as work you have shown.

THE METHOD

Three stages, the same road.

  • FOLLOW · SCOPED TO THE BLUEPRINT

    Built from your exam’s own outline.

    Your plan comes from the exam’s published outline (the blueprint), domain by domain — not from a course that happens to overlap it. As your test date gets closer, your remaining hours go to the areas where you’ve shown the least. They do not go back through material you finished months ago.

  • BREAK · WORKED, THEN SPARRED

    One mission at a time, then a spar with the reasoning shown.

    A mission is one piece of hands-on work in a practice lab, sized to fit your week. Your coach tells you why it’s next. Then you spar: your coach questions your answers on the objectives you choose, and you defend them.

  • TRANSCEND · RECORDED AS EVIDENCE

    Four marks. Nothing predicted.

    Everything your map says about you is one of four marks: Not observed, Developing, Demonstrated, or Revisit. Each mark records something you did. There is no score and no predicted pass chance. A mark can move backward when your coach sees a skill slipping — that’s the map doing its job. You never walk into the exam trusting stale strengths.

THE VOCABULARY

Four marks, and no fifth one.

Every domain, every concept, every mission outcome resolves to one of these four marks. Nothing here is a grade, a rank, or a predicted pass chance.

  • Not observed
  • Developing
  • Demonstrated
  • Revisit
A MISSION

Sized to the week you have.

SAMPLE MISSION

Subnet under time pressure

Domain 3.0 — your IP addressing is solid. Deciding how to segment a network is where you’ve shown the least. Place these services into zones, then explain why you drew the lines where you did.

≈ 25 MINSANDBOX + TERMINALDOMAIN 3.0
A SPAR

Your coach questions the answer, not you.

ILLUSTRATIVE — NOT A LIVE SESSION

  1. COACH

    You said the first move is to block the IP. What does that cost you if the address is a shared proxy?

  2. YOU

    Then I block every user behind it. I should rate-limit the login endpoint first and confirm the source.

  3. COACH

    Good. Which log tells you it is one proxy and not one attacker?

THE MAP

What your map looks like.

DOMAINEVIDENCECONCEPTS OBSERVED
1.0 General Security ConceptsDemonstrated21 / 24
2.0 Threats, Vulnerabilities & MitigationsDeveloping11 / 26
3.0 Security ArchitectureDeveloping8 / 21
4.0 Security OperationsNot observed0 / 28
5.0 Security Program ManagementRevisit3 / 15

ILLUSTRATIVE SAMPLE — YOUR MAP STARTS EMPTY.

How it works · Dojo Academy