About CSFA Exam Prep

An independent practice platform for the CyberSecurity Forensic Analyst (CSFA) exam - real questions across every exam domain, each with a plain-language explanation.

What's on the CSFA exam

The CyberSecurity Forensic Analyst (CSFA) exam is organized into 30 knowledge domains. It runs 29 hours 30 minutes. Here is what it covers:

• Active, archival and latent data
• Affidavits, motions, and subpoenas
• Compact Disc analysis
• Conducting keyword boolean searches
• Creating understandable and accurate reports
• Creating forensically sound working copies or images of media
• Documentation, chain of custody, and evidence handling procedures
• FAT 16/32 file systems
• File Headers and Footers
• File slack, ram slack, drive slack, and unallocated space
• Hashes and Checksums
• Imaging handheld devices
• Insurance/liability issues
• Interpretation of various log formats
• Interpreting Internet History and HTTP concepts
• Manual and automated data recovery
• Metadata for Microsoft Office and PDF documents
• NTFS
• Overcoming encryption mechanisms and password protection
• PC hardware concepts
• Privacy issues
• Rules of evidence
• TCP/IP concepts
• Windows print spool files
• Windows Prefetch
• Windows registry
• Windows shortcuts
• Windows swap file
• Windows Volume Shadow Copy
• Working as an expert technical witness

Every practice question on this site is organized across these 30 domains, so your study tracks the real exam structure instead of guesswork. As you answer, the per-domain analytics surface the areas still costing you points, so your review goes where it moves your score.

What we believe good exam prep looks like

Realistic practice beats passive reading. Every question is written to mirror the style and difficulty of the real exam, with a clear explanation of why the right answer is right and the others aren't.

Your weak spots should find you. Domain analytics, mistake review, and re-drilling are built in, so study time goes where it moves your score.

Pricing should be simple. One payment for a fixed access window matched to your exam date. No subscription, no auto-renewal, and 10 free questions to try before you spend anything.

Get in touch

Questions, feedback, or something not working? Email support@boardmentor.study - candidate messages are read and answered.