User Shares Experience and Seeks Advice After Failing SAL1 Exam

The poster attempted the SAL1 exam after 3 months of Cisco training and 5 months of TryHackMe preparation but failed with a score of 631. They consolidated their attack chain into a single report (alert #1000) and referenced it in subsequent alerts, receiving few points despite detailed content. The user questioned whether copying the full report into each alert was required and asked if using internet searches for MITRE tactics during the exam was permitted. They also noted the exam’s strict scoring system, limited time, and lack of detailed feedback from TryHackMe.