Sophos · SOPH-ET12
Provider credential for Central Detection and Response Engineer. Use the official award requirements and product training alongside the selected concept practice.
Issuer guidance
Ask the holder for their provider-issued certificate or shareable completion record and check the exact credential, identity and current validity with the provider. Account access may be required. CertSprout does not access private training records; a manual entry or uploaded certificate alone is not automatically verified.
If your award has a public Credly badge, you can import its URL. CertSprout automatically checks supported Credly and Microsoft Learn records. Provider-site lookups and manually attached links do not automatically mark a credential verified. A public record confirms the award; it does not prove the signed-in user owns it.
Guidance checked 2026-09-06.
Study time and difficulty are CertSprout estimates. How difficulty works. Requirements and renewal rules come from the issuer.
See exam pricing for your country →We haven’t added an exam topic breakdown for this certification yet.
Topic weights reflect the catalog outline and can change between exam versions. Confirm the current objectives, prerequisites and registration rules with Sophos.
Pack your study kit
Start with the certification requirements, explore free materials, then add paid learning if it suits you.
Requirements, exam details and booking
Check the issuer’s current objectives, prerequisites, exam version and booking options. Exams and training may cost extra; local availability is confirmed by the provider.
Public guides, videos and tutorials, plus free courses. Each card explains whether you need an account.
Keep exploring certifications from Sophos.
More from this issuer →Product guides and troubleshooting references
Public reading · no account needed
Use the documentation for your deployed product and version to validate configuration, permissions and troubleshooting. Product documentation is a reference, not a complete exam syllabus.
Reviewed 2026-09-06. Check the current version and access terms.
Open free resourceAdversary techniques and detection references
Public reading · no account needed
Connect observations to documented adversary behavior and detection ideas. Validate techniques and telemetry in your own authorized lab; the framework is not an exam blueprint.
Reviewed 2026-09-06. Check the current version and access terms.
Open free resourceRisk-management framework and learning resources
Public reading · no account needed
Review governance, protection, detection, response and recovery outcomes. Useful for understanding security programs and communicating risks.
Reviewed 2026-09-06. Check the current version and access terms.
Open free resourceResources open on the provider’s website. Free reading does not include paid exams, optional upgrades or cloud usage. Check the exam version and country access. Recommendations are selected for relevance; commission does not influence their order. Any commission-earning link is disclosed beside that link. How affiliate links work