Elastic Certified Analyst Practice Test
Build your confidence for Elastic Certified Analyst. Practice the concepts, understand the answers, and strengthen your knowledge one question at a time.
Try a sample questionExam overview and details
Kibana analyst certification covering data visualization, dashboard creation, Lens, Maps, Canvas, and data analysis using the Elastic Stack. Administered by Elastic as a hands-on practical (live elasticsearch environment, remote proctored) format exam. Key domains include Dashboards, Discover, Elastic Common Schema (ECS) and Lens.
Sample Questions
Choose an answer and explore the explanation to see how practice works.
A security analyst is working in Kibana 8.8 with authentication event data. A user can view a dashboard but cannot create or edit alerting rules. Which action best satisfies the requirement?
A finance analyst is working in Kibana 8.8 with payment transaction indices. Several numeric metrics per service should be modeled together over time. Which action best satisfies the requirement?
A support analyst is working in Kibana 8.8 with an ecommerce order data stream. A team repeatedly opens the same Discover view with selected columns, sorting, KQL, and filters for a weekly review. What should the analyst save?
A logistics analyst is working in Kibana 8.8 with shipment telemetry data. A sales map must shade regions by total revenue using boundary shapes and transaction data. Which action best satisfies the requirement?
A reliability analyst is working in Kibana 8.8 with service log indices. A Lens table must show category, revenue, refunds, refund rate, and a total row. Which action best satisfies the requirement?
Career Opportunities & Salary
Exam insights and study advice
In today's data-driven environment, the ability to quickly find patterns, diagnose issues, and communicate findings is critical. This certification matters because it moves beyond theoretical knowledge to prove you can directly impact business outcomes. Certified Analysts can reduce mean time to resolution (MTTR) for incidents, uncover hidden trends affecting revenue or performance, and create self-service dashboards that empower entire teams to make data-informed decisions. It validates the exact skills needed to turn telemetry, logs, and metrics into a strategic asset.
Recommended
These are the backgrounds the certifying body suggests. Check the vendor's own page for anything it formally requires.
What this exam covers
01Dashboards
Topics
- Constructing and using dashboards for security use cases
Learning objectives
- Constructing and using dashboards for security use cases
02Discover
Topics
- Customizing the Discover interface to search for data
Learning objectives
- Customizing the Discover interface to search for data
03Elastic Common Schema (ECS)
Topics
- Examining the application and guidelines of Elastic Common Schema (ECS)
Learning objectives
- Examining the application and guidelines of Elastic Common Schema (ECS)
04Lens
Topics
- Constructing Lens visualizations for security use cases
Learning objectives
- Constructing Lens visualizations for security use cases
05Security application
Topics
- Utilizing, analyzing, correlating, tracking and monitoring the security application
Learning objectives
- Utilizing, analyzing, correlating, tracking and monitoring the security application
06Stack Architecture
Topics
- Using the Elastic Security solution from Stack Architecture
Learning objectives
- Using the Elastic Security solution from Stack Architecture
07Visualizations
Topics
- Creating aggregation-based visualizations
Learning objectives
- Creating aggregation-based visualizations