Security Onion Solutions

SOCP Exam Overview

The SOCP exam validates that you have the knowledge and skills to properly investigate alerts, hunt for adversaries, and manage your Security Onion grid.

Exam Domains

This exam tests your knowledge in the following five domains:

  1. Design and Architecture
    Strategies for properly designing and installing a Security Onion grid.

  2. Grid Management
    Procedures required in administering and maintaining a Security Onion grid.

  3. Grid Monitoring and Troubleshooting
    Knowledge on how to properly monitor and identify potential issues in a Security Onion grid.

  4. Grid Tuning
    Tactics to ensure a Security Onion sensor grid is running efficiently.

  5. Analyst Tools
    Tools and techniques needed to properly investigate alerts and hunt for adversaries using Security Onion.

SOCP Exam Details

  • Cost: $199
  • Certification validity: 3 years
  • Length: 50 questions, 120 minutes
  • Retake wait time: None

Exam details
Schedule exam
Registration Guide

Authorized Materials

The SOCP exam is in an open book format.

The following are all authorized materials for the exam:

  • Security Onion Documentation Paperback book (Available online here)
  • Course material for any Security Onion Solutions instructor-led training
  • Notes (handwritten or typed)

Reference materials having the appearance of exam questions and answers are strictly prohibited.

Contact Information

Have questions about the SOCP?
Contact Us