# Difficulties with Elastic Security SIEM course challenges

**URL:** <https://discuss.elastic.co/t/difficulties-with-elastic-security-siem-course-challenges/380494>\
**Category:** Elastic Training\
**Created:** [July 28, 2025, 11:08am UTC](https://discuss.elastic.co/t/difficulties-with-elastic-security-siem-course-challenges/380494 "2025-07-28T11:08:33Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Storms](https://avatars.discourse-cdn.com/v4/letter/s/6de8d8/32.png) [@Storms](https://discuss.elastic.co/u/Storms)\
**Post date:** [July 28, 2025, 11:08am UTC](https://discuss.elastic.co/t/difficulties-with-elastic-security-siem-course-challenges/380494/1 "2025-07-28T11:08:34Z")

</div>

Course: Elastic Security for SIEM

Do I need to pass 100% of the CTFd challenges to get a course completed? There are a few challenges that I just can't get right. For example: 5.3 Lens / 1 Destination port.

I do what I think has been asked and the answer that I get from Lens is incorrect (see picture below). I know what the right answer is (I was able to guess it) - but I can't figure out how to get the the correct answer using the tool. It could be that I don't understand the question correctly. I have a few other challenges where I think I'm doing what is being asked but my answers are wrong and it is very frustrating that I can't get a course completed because I can't figure out what the challenge requires.

 ![Näyttökuva 2025-07-28 135008](https://us1.discourse-cdn.com/elastic/original/3X/1/c/1c07de543bc7807b927aacbd3900f85e3e95a0b8.png)

Similar challenges are the two challenges following this one, 2 record count and 3 summary data. I can't get them right because something is wrong with my search even though to my understanding it should be correct.

---

<div class="post-metadata">

**Author:** ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)\
**Post date:** [July 28, 2025, 11:18am UTC](https://discuss.elastic.co/t/difficulties-with-elastic-security-siem-course-challenges/380494/2 "2025-07-28T11:18:41Z")

</div>

Hello @Storms

Welcome to the community.

I also faced similar issue highlighted by you. To overcome this i tried using default/existing dashboards in Kibana post that i was able to answer & understood what was missed as i inspected how the dashboard was created & what filters were applied. But yes i also did the same as it was asked in question but answer was always wrong.

Thanks!!