Certified Tester - Application

Measured data

CREST logo

Certified Tester - Application

CCT APP

We scored 150 real Certified Tester - Application exam questions 1-10 on question complexity and broke the result down by exam domain.

150 questions scored
5 domains
2.0/10 overall complexity

Complexity by exam domain

Higher scores mean more demanding question formats. The exam score is computed over the whole bank, not averaged across domains.

Exam complexity score2.0/10Gentle · measured across 150 bank questions
  • Application Security Fundamentals23 questions · complexity 1.8/10 · Gentle

    30% multi-select · 0% scenario · 30% interactive

  • Application Security Testing Tools and Techniques43 questions · complexity 2.2/10 · Gentle

    40% multi-select · 0% scenario · 33% interactive

  • Professional Practice and Ethics14 questions · complexity 2.2/10 · Gentle

    36% multi-select · 7% scenario · 29% interactive

  • Reporting and Communication22 questions · complexity 1.9/10 · Gentle

    32% multi-select · 0% scenario · 32% interactive

  • Web Application Attacks and Exploitation48 questions · complexity 2.0/10 · Gentle

    33% multi-select · 0% scenario · 33% interactive

Full per-domain breakdown

Blueprint weight, bank size and question format mix for every domain of the exam.

DomainBlueprintQuestionsSingleMultiInteractiveComplexity
Application Security Fundamentals15%238871.8/10Gentle
Application Security Testing Tools and Techniques25%431514142.2/10Gentle
Professional Practice and Ethics15%145542.2/10Gentle
Reporting and Communication15%228771.9/10Gentle
Web Application Attacks and Exploitation30%481616162.0/10Gentle

How the score is calculated

The formula is fixed and public, so anyone can reproduce these numbers from the same bank.

Every question in the Certified Tester - Application bank is measured on four signals that can be read directly from the database. Each signal is expressed as a share of the questions in the domain, and the four shares are combined with fixed weights:

  • Multi-select questions (40% weight). Items with more than one correct answer. The candidate has to find all of them, which is the single hardest format in the bank.
  • Scenario questions (30% weight). Questions longer than 150 characters, which describe a situation instead of a definition and therefore test reasoning rather than recall.
  • Interactive questions (20% weight). Items that require reading code or a configuration snippet.
  • Deep explanations (10% weight). Questions whose explanation runs past 300 characters, which signals a concept with real nuance behind it.

The combined share is multiplied by ten to produce a 1-10 score. The exam-level score is computed over the whole bank rather than averaged across domains, so a small domain cannot distort the total. Figures on this page are recomputed from the live bank on every crawl.

Data set: Certilum Certified Tester - Application Foundation question bank, 150 questions, 5 domains. Published by CERTILUM. This is Certilum’s own measurement of its own question bank and is not an official CREST statistic.

Questions analysed
150
Exam domains
5
Hardest domain
Application Security Testing Tools and Techniques (2.2)
Most approachable domain
Application Security Fundamentals (1.8)
Question mix
52 single · 50 multi · 48 interactive
Measured on
Foundation

Frequently asked questions

What our Certified Tester - Application complexity numbers mean and how they are produced.