BTL1 的基于表现题目：是什么，如何练习
BTL1 is a 24-hour practical incident-response assessment from Centri, formerly Security Blue Team. You investigate a lab environment and receive immediate grading and feedback. Our short practice tasks build supporting skills and do not reproduce that exam environment.
为什么会有这些题目
Whether you can investigate evidence and reach supported conclusions. Practise working with phishing artifacts, logs, forensic data, and incident-response workflows in a hands-on environment.
在真实考试中，它们表现为applied investigation tasks。Open book and unproctored — course material, personal notes and search engines are allowed, AI assistants are prohibited
- Record findings with their supporting evidence so you can verify each conclusion and distinguish an observation from an assumption.
- Use the full window rather than treating it as a timed sitting. It exists so you can be thorough.
- Keep contemporaneous notes as you work. Reconstructing your reasoning at the end is slower and less accurate than recording it as you go.
我们如何练习它们
我们的 BTL1 题库包含 44 道 PBQ 风格练习题，分为两种形式：匹配任务（将每项需求与满足它的能力配对）和排序任务（将某个流程的步骤排序）。每道题都附有和选择题相同的完整解析，说明为什么正确的安排是对的，以及为什么看似合理的选项是错的。
这些练习训练的是考试所考察的推理能力——顺序、定位和匹配——而不是复刻厂商的模拟界面。这里的任何内容都不会重现真实的考试环境，任何练习产品也都不应该合法地这样做。
Because the BTL1 exam is practical, our exercises here train the underlying reasoning rather than mirror the exam interface. Confirm current pass thresholds and retake terms on the official Security Blue Team page, as they change periodically.
看看你在 BTL1 上处于什么水平
25 道免费题目，无需信用卡。你的领域得分会显示在预约考试前哪些方面还需要加强。
理解答案背后的判断。
先分析情境，找出关键证据，再对照解析检查自己的推理。根据各领域的得分决定下一次复习重点。练习正确率只能提示学习进度，不能预测正式考试成绩，也不等同于官方分数。
BTL1 是实操调查考试。这些题目和匹配练习可以补充动手实验，但不会重现考试机构的考试环境。