Arista Network Detection & Response Specialist

Exam format

Arista logo

Arista Network Detection & Response Specialist Exam Format

ACE:NDR

Everything the official exam blueprint specifies: question count, time limit, scoring and the weight each domain carries. The Arista Network Detection & Response Specialist certification validates the skills required to deploy, configure, and operate Arista's NDR solution (Awake Security). Candidates demonstrate expertise in leveraging network telemetry, behavioral analytics, and automated response to detect and remediate advanced threats. This certification is ideal for security analysts, SOC professionals, and network engineers who need to master the end-to-end lifecycle of network detection and response within Arista's security ecosystem.

45 questions
90 min
80% to pass
6 domains

Exam facts at a glance

What we know about this exam, and where the information comes from.

SpecificationValue
Questions45
Time limit90 minutes (120s per question)
Passing score80%
Domains6
LevelAssociate
Question bank here45 questions
SourceCertilum's own record — the vendor does not publish this figure

Official domain weights

The percentage of the exam each domain carries. Weight your revision by these numbers, not by what you find hardest.

DomainWeightTopicsPractice Qs
Response & Automation15%
  • Playbook creation and automated response actions
  • Integration with SIEM, SOAR, and firewalls
  • Quarantine and containment workflows
  • +1 more
7
Operational Management5%
  • Dashboard customization and KPIs
  • System administration and upgrades
  • License management and capacity planning
  • +1 more
2
Investigation & Forensics20%
  • Packet capture and full session recording
  • Entity investigation: devices, users, flows
  • Timeline analysis and root cause identification
  • +1 more
9
Threat Detection & Analytics25%
  • Behavioral analytics and machine learning models
  • Alert triage and false positive tuning
  • Indicator of Compromise (IoC) matching
  • +1 more
11
Arista NDR Platform Architecture20%
  • Awake Security appliance deployment
  • Cloud and hybrid deployment models
  • Platform components: sensors, collectors, management console
  • +1 more
9
Network Detection & Response Fundamentals15%
  • NDR vs. traditional security tools
  • Network telemetry sources (NetFlow, IPFIX, metadata)
  • Threat intelligence integration
  • +1 more
7

The heaviest domain is Response & Automation at 15%, and that is where lost points cost you the most. Certilum scores you per domain so you can see the difference between a knowledge gap and a formatting problem.

Note from the vendor record: PRICE: Arista does not publish an exam price for ACE:NDR: it does not appear in the current tracks/exams catalogue (learning pathways and exam datasheets). Checked training.arista.com (learning pathways, product brief PDF, exam requirements & policies PDF) and there is no official exam fee listed for NDR.

More about the Arista Network Detection & Response Specialist exam

Explore the rest of this page series: format, cost, difficulty, requirements and how to prepare.

Related certifications

Explore other certifications in the same category and see how they stack up.

Frequently asked questions

Everything you need to know about the Arista Network Detection & Response Specialist exam.