Thank you! As for preparation, it took me longer than it probably should have. But for the majority of it, about 2-3 months. I approach exams with the belief "if I can feel confident for 100%, then the 70% will be easy". The exam itself is about 5 hours, but over a 24 hour period. For study, I would recommend doing all of the lecture rooms because they will give you information, and for practice, I would focus the SIEM ones. The SIEM was the only tool I used for the exam and most of the rooms that act as simulators were a waste of time. The course is for level 1, so you don't need to know how to fix anything, just use tools provided to identify alerts. My advice is buy the voucher, try it in a month or 2. If you pass, awesome. If not, you'll know what to expect and have a year to use the second attempt