Measured data
Certified Tester - Application
We scored 150 real Certified Tester - Application exam questions 1-10 on question complexity and broke the result down by exam domain.
- 150 questions scored
- 5 domains
- 2.0/10 overall complexity
Complexity by exam domain
Higher scores mean more demanding question formats. The exam score is computed over the whole bank, not averaged across domains.
- Application Security Fundamentals23 questions · complexity 1.8/10 · Gentle
30% multi-select · 0% scenario · 30% interactive
- Application Security Testing Tools and Techniques43 questions · complexity 2.2/10 · Gentle
40% multi-select · 0% scenario · 33% interactive
- Professional Practice and Ethics14 questions · complexity 2.2/10 · Gentle
36% multi-select · 7% scenario · 29% interactive
- Reporting and Communication22 questions · complexity 1.9/10 · Gentle
32% multi-select · 0% scenario · 32% interactive
- Web Application Attacks and Exploitation48 questions · complexity 2.0/10 · Gentle
33% multi-select · 0% scenario · 33% interactive
Full per-domain breakdown
Blueprint weight, bank size and question format mix for every domain of the exam.
| Domain | Blueprint | Questions | Single | Multi | Interactive | Complexity |
|---|---|---|---|---|---|---|
| Application Security Fundamentals | 15% | 23 | 8 | 8 | 7 | 1.8/10Gentle |
| Application Security Testing Tools and Techniques | 25% | 43 | 15 | 14 | 14 | 2.2/10Gentle |
| Professional Practice and Ethics | 15% | 14 | 5 | 5 | 4 | 2.2/10Gentle |
| Reporting and Communication | 15% | 22 | 8 | 7 | 7 | 1.9/10Gentle |
| Web Application Attacks and Exploitation | 30% | 48 | 16 | 16 | 16 | 2.0/10Gentle |
How the score is calculated
The formula is fixed and public, so anyone can reproduce these numbers from the same bank.
Every question in the Certified Tester - Application bank is measured on four signals that can be read directly from the database. Each signal is expressed as a share of the questions in the domain, and the four shares are combined with fixed weights:
- Multi-select questions (40% weight). Items with more than one correct answer. The candidate has to find all of them, which is the single hardest format in the bank.
- Scenario questions (30% weight). Questions longer than 150 characters, which describe a situation instead of a definition and therefore test reasoning rather than recall.
- Interactive questions (20% weight). Items that require reading code or a configuration snippet.
- Deep explanations (10% weight). Questions whose explanation runs past 300 characters, which signals a concept with real nuance behind it.
The combined share is multiplied by ten to produce a 1-10 score. The exam-level score is computed over the whole bank rather than averaged across domains, so a small domain cannot distort the total. Figures on this page are recomputed from the live bank on every crawl.
Data set: Certilum Certified Tester - Application Foundation question bank, 150 questions, 5 domains. Published by CERTILUM. This is Certilum’s own measurement of its own question bank and is not an official CREST statistic.
- Questions analysed
- 150
- Exam domains
- 5
- Hardest domain
- Application Security Testing Tools and Techniques (2.2)
- Most approachable domain
- Application Security Fundamentals (1.8)
- Question mix
- 52 single · 50 multi · 48 interactive
- Measured on
- Foundation
Frequently asked questions
What our Certified Tester - Application complexity numbers mean and how they are produced.