DAA Certified Web Analyst (CWA) — Questions and Answers

Question 1: What does a first-party cookie set by the site's own domain help most with, compared to third-party cookies?

Greater persistence and fewer blocking issues in browsers (Correct answer)
Faster server response
Tracking users across unrelated sites
Higher ad revenue

Correct answer: Greater persistence and fewer blocking issues in browsers

First-party cookies are less likely to be blocked and deleted by browsers.

Question 2: What is the MOST effective way to stay current with developments in troubleshooting & problem resolution for Certified Web Analyst?

Relying on experience gained early in career
Reading only internal communications
Participating in professional development, industry events, and peer collaboration (Correct answer)
Following a single expert opinions

Correct answer: Participating in professional development, industry events, and peer collaboration

A multi-faceted approach including formal development, industry events, and peer collaboration provides the broadest perspective on current developments.

Question 3: Which item belongs in a good privacy policy for an analytics-driven site?

Only the cookie names
Only the company's logo and address
What data is collected, why, who receives it and how users exercise their rights (Correct answer)
Just a list of CSS files

Correct answer: What data is collected, why, who receives it and how users exercise their rights

Transparency requires purposes, recipients, retention and user rights to be described.

Question 4: COPPA primarily restricts data collection from which group?

Healthcare patients
Financial customers
Children under 13 (Correct answer)
Government employees

Correct answer: Children under 13

COPPA regulates online collection of personal information from children under 13 in the US.

Question 5: What does 'scroll depth' measure in user behavior analytics?

How quickly a page loads for users
The number of pages within the site's sitemap
How far down a page users scroll before leaving (Correct answer)
The depth of the website's navigation hierarchy

Correct answer: How far down a page users scroll before leaving

Scroll depth tracks what percentage of a page's content users actually view, revealing where engagement drops off and where key content should be placed.

Question 6: What is a key reason to use consistent naming conventions for events and campaigns?

They increase sampling
They change cookie names
Reports stay clean and aggregable without fragmented values (Correct answer)
They improve page speed

Correct answer: Reports stay clean and aggregable without fragmented values

Consistent names prevent split rows like 'Email' vs 'email' in reports.

Question 7: What is the effect of setting a session timeout too short?

Cookies are deleted immediately
Sessions never end
Bounce rate drops to zero
Single visits are split into multiple sessions (Correct answer)

Correct answer: Single visits are split into multiple sessions

A short timeout ends sessions during normal inactivity, inflating session counts.

Question 8: What is the recommended approach for managing who can edit a tag manager container?

No versioning
Sharing one admin login
Least-privilege user permissions with approval workflows (Correct answer)
Public edit access

Correct answer: Least-privilege user permissions with approval workflows

Granular roles and approvals reduce the risk of accidental or unauthorized changes.

Question 9: Bounce rate on a single-page article is near 100% but users clearly scroll and read. Which fix best reflects true engagement?

Add engagement events such as scroll depth or timers (Correct answer)
Filter out all organic traffic
Remove the article
Increase session timeout only

Correct answer: Add engagement events such as scroll depth or timers

Without extra interaction events, single-page visits register as bounces regardless of reading behavior.

Question 10: How does GA4 handle visitor IP addresses?

It stores full IPs for 14 months
It stores only the last octet
It does not log or store IP addresses (Correct answer)
It stores IPs only for EU users

Correct answer: It does not log or store IP addresses

GA4 uses IP addresses for geolocation at collection but does not log or store them.

Question 11: What does a 'dead click' indicate in behavior analytics?

A broken hyperlink leading to a 404 error page
A click that triggers no detectable server response
A fraudulent click generated by a bot
A click on a non-interactive element that users mistakenly expect to be clickable (Correct answer)

Correct answer: A click on a non-interactive element that users mistakenly expect to be clickable

Dead clicks occur when users click on elements that are not interactive, revealing a UX gap where users expect functionality that does not exist.

Question 12: What is the main purpose of a data layer in a tag management implementation?

To replace the analytics cookie
To provide a structured, site-controlled data object that tags can read (Correct answer)
To compress images
To store user passwords

Correct answer: To provide a structured, site-controlled data object that tags can read

A data layer decouples tracking from page markup by exposing structured data to the tag manager.

Question 13: After adding a filter, historical data looks permanently missing for some traffic. What is the key lesson?

Filters can always be undone retroactively
Filters change processed data irreversibly, so test on a separate view first (Correct answer)
Filters only affect the interface
Filters are applied after reports load

Correct answer: Filters change processed data irreversibly, so test on a separate view first

Data filters apply at processing time and cannot be reversed, which is why a test view and raw backup view matter.

Question 14: What is 'rage clicking' in user behavior analysis?

When users navigate repeatedly back and forth between two pages
When users completely ignore call-to-action buttons
When users rapidly click the same non-responsive element multiple times out of frustration (Correct answer)
When users share negative content about a brand on social media

Correct answer: When users rapidly click the same non-responsive element multiple times out of frustration

Rage clicking occurs when a user clicks the same element repeatedly in quick succession, typically signaling frustration with an unresponsive or broken UI element.

Question 15: What is a key metric for website performance?

Page load time (Correct answer)
Color scheme.
Number of pages.
Number of ads.

Correct answer: Page load time

Page load time is a key metric for website performance, measuring how long it takes for a web page to fully display its content to a user. Faster page load times significantly improve user experience, reduce bounce rates, and positively impact search engine rankings. It directly correlates with user satisfaction and conversion rates.

Question 16: What does 'Customer Effort Score' (CES) specifically measure?

How easy or difficult customers find it to accomplish their goal or resolve an issue (Correct answer)
How much effort a business exerts to acquire a customer
The number of steps in a checkout process
The cost-per-click in a paid advertising campaign

Correct answer: How easy or difficult customers find it to accomplish their goal or resolve an issue

CES directly measures the ease of a customer interaction; lower effort scores correlate with higher customer loyalty and reduced churn.

Question 17: Which principle says an analytics user should receive only the permissions needed to do their job?

Security through obscurity
Separation of concerns
Defense in depth
Least privilege (Correct answer)

Correct answer: Least privilege

Least privilege limits each account to the minimum access required for its tasks.

Question 18: What is the MOST effective way to stay current with developments in security & access control for Certified Web Analyst?

Following a single expert opinions
Relying on experience gained early in career
Reading only internal communications
Participating in professional development, industry events, and peer collaboration (Correct answer)

Correct answer: Participating in professional development, industry events, and peer collaboration

A multi-faceted approach including formal development, industry events, and peer collaboration provides the broadest perspective on current developments.

Question 19: How long does a controller generally have to respond to a GDPR data subject access request?

One year
Six months
72 hours
One month (Correct answer)

Correct answer: One month

GDPR requires a response without undue delay and within one month, extendable in complex cases.

Question 20: What does 'statistical significance' mean in A/B testing?

Both variants performed identically
The result is unlikely to have occurred by chance alone (Correct answer)
The sample size was larger than average
The test ran for a statistically long duration

Correct answer: The result is unlikely to have occurred by chance alone

Statistical significance indicates that the observed difference between test variants is unlikely due to random chance, making the result reliable.

Question 21: How should a single-page application typically report virtual pageviews?

Rely on the initial load only
Fire a pageview on history change events (Correct answer)
Use only server logs
Never track navigation

Correct answer: Fire a pageview on history change events

SPAs change content without reloads, so history-change triggers send virtual pageviews.

Question 22: Users report seeing different prices than analytics e-commerce data shows. What is the likely data issue?

Browsers cache analytics
Data layer values are populated before the price is updated or are hardcoded incorrectly (Correct answer)
The sampling rate changed
Bot traffic

Correct answer: Data layer values are populated before the price is updated or are hardcoded incorrectly

Data layer timing or static values can send outdated or wrong prices to analytics.

Question 23: Direct traffic suddenly spikes after a site migration to HTTPS, while referral traffic from partner sites drops. What is the most likely cause?

Partner sites removed all links
Bots stopped crawling the site
The tracking code was duplicated
Referrer information is lost on HTTP-to-HTTPS redirects or insecure links (Correct answer)

Correct answer: Referrer information is lost on HTTP-to-HTTPS redirects or insecure links

Referrer data is stripped when traffic passes from HTTPS to HTTP or through certain redirects, so sessions fall into Direct.

Question 24: Campaign traffic shows as 'direct / none' even though links were shared in email. What is the most likely missing element?

A robots meta tag
UTM parameters on the email links (Correct answer)
A sitemap entry
A canonical tag

Correct answer: UTM parameters on the email links

Without campaign tagging, email clicks often lack referrer data and are grouped as direct.

Question 25: A marketer accidentally sends customer email addresses to Google Analytics. According to Google's terms, what must happen?

Wait for automatic expiry
Nothing, since the data is encrypted
Rename the property
The data must be deleted and collection stopped (Correct answer)

Correct answer: The data must be deleted and collection stopped

Google's terms prohibit sending PII, so the data should be removed and the source fixed.

Question 26: Event counts differ between two reports that use different scopes of the same dimension. What is the probable explanation?

Server failure
A malformed sitemap
Scope mismatch between session-level and event-level dimensions (Correct answer)
A corrupted cookie

Correct answer: Scope mismatch between session-level and event-level dimensions

Combining dimensions and metrics of different scopes produces differing or unexpected totals.

Question 27: Which dataLayer push will fire a Custom Event trigger named 'form_submit'?

dataLayer.push({name:'form_submit'})
dataLayer.push('form_submit')
dataLayer.push({event:'form_submit'}) (Correct answer)
dataLayer.form_submit = true

Correct answer: dataLayer.push({event:'form_submit'})

Custom Event triggers match the value of the 'event' key in a dataLayer push.

Question 28: What are cookies in terms of privacy?

Malware.
Data files for tracking (Correct answer)
Computer viruses.
Web browsers.

Correct answer: Data files for tracking

In terms of privacy, cookies are small text files stored on a user's device by a website they visit. They are primarily used to remember information about the user, such as login status, preferences, or shopping cart contents, and are also extensively used for tracking user behavior across websites for analytics and targeted advertising. Due to their tracking capabilities, cookies are a significant focus of data privacy regulations.

Question 29: What is GDPR?

General Data Privacy Regulation.
General Data Protection Regulation (Correct answer)
Global Data Privacy Rules.
Government Data Protection.

Correct answer: General Data Protection Regulation

GDPR stands for General Data Protection Regulation. It is a comprehensive data privacy law enacted by the European Union, designed to give individuals more control over their personal data. This regulation sets strict rules for how personal data must be collected, stored, processed, and protected by organizations worldwide that handle data of EU residents.

Question 30: Reports show a sudden surge of sessions from one unfamiliar country with 100% bounce and 0-second duration. What is the best response?

Increase ad budget in that country
Identify it as likely bot traffic and filter it via IP, hostname or bot filtering (Correct answer)
Celebrate the growth
Reset the property

Correct answer: Identify it as likely bot traffic and filter it via IP, hostname or bot filtering

Zero-duration, fully bouncing geographic spikes are classic signs of non-human traffic that should be excluded.

Question 31: Which scope applies a custom dimension value to every hit in a session?

Product scope only
Session scope (Correct answer)
Hit scope only
Account scope

Correct answer: Session scope

Session scope persists a value across all hits of the session.

Question 32: What is a Content Security Policy (CSP) used for in relation to analytics scripts?

Scheduling reports
Defining which script sources the browser may load (Correct answer)
Creating audiences
Compressing images

Correct answer: Defining which script sources the browser may load

CSP restricts allowed script origins, so analytics domains must be explicitly permitted.

Question 33: Which competency is MOST essential for professionals working in troubleshooting & problem resolution in Certified Web Analyst?

Speed of task completion above all else
Seniority-based decision making
Memorization of procedures without understanding principles
Critical thinking combined with practical application of knowledge (Correct answer)

Correct answer: Critical thinking combined with practical application of knowledge

Critical thinking allows professionals to apply knowledge effectively in varied situations, leading to better outcomes than rote procedures.

Question 34: Page load timing events show unrealistic values like negative or very large numbers. What is the best first check?

Verify how the timing is calculated and that it is sent after the page load completes (Correct answer)
Delete the metric
Disable cookies
Switch to a mobile device

Correct answer: Verify how the timing is calculated and that it is sent after the page load completes

Timing errors usually come from incorrect calculations or events fired before the needed timestamps exist.

Question 35: What does 'attention map' data reveal about user behavior?

Which content pieces receive the most social media shares
Where users concentrate their visual focus and attention on a page (Correct answer)
How users navigate through the site's information architecture
Which server resources receive the highest request volumes

Correct answer: Where users concentrate their visual focus and attention on a page

Attention maps, often generated from eye-tracking studies or mouse movement analysis, reveal which page zones receive the most user focus, guiding content placement decisions.

Question 36: What is 'the fold' in web design and UX analytics?

The visible portion of a webpage before a user scrolls (Correct answer)
The mobile-optimized version of a webpage
The bottom footer section of a webpage
The navigation menu and header structure

Correct answer: The visible portion of a webpage before a user scrolls

The fold refers to the boundary of what is visible in the browser window without scrolling; content 'above the fold' receives more initial exposure and engagement.

Question 37: An analyst notices that paid search drives 40% of first-click conversions but only 10% of last-click conversions. What does this most likely indicate?

Last-click attribution is inflating organic search numbers
Paid search plays a strong role in initiating the customer journey (Correct answer)
Paid search has a tracking implementation error
Paid search campaigns should be paused immediately

Correct answer: Paid search plays a strong role in initiating the customer journey

When a channel ranks high in first-click but low in last-click, it indicates the channel is effective at driving initial awareness and starting the conversion funnel.

Question 38: In Google Apps Script, what is the standard way to refresh a Sheets report automatically every morning?

A doGet web app deployment
A time-driven trigger (Correct answer)
An onEdit simple trigger
A manual button macro

Correct answer: A time-driven trigger

Time-driven triggers run a function on a schedule without user interaction.

Question 39: What is 'task completion rate' in UX analytics?

The rate at which new product features are shipped
The percentage of server-side tasks completed without errors
The percentage of support tickets resolved within SLA
The percentage of users who successfully complete a defined task on a website (Correct answer)

Correct answer: The percentage of users who successfully complete a defined task on a website

Task completion rate measures how effectively a website enables users to accomplish their goals, serving as a direct indicator of usability.

Question 40: What is the maximum fine for the most serious GDPR violations?

€20 million or 4% of global annual turnover, whichever is higher (Correct answer)
2% of EU revenue only
€10 million or 1% of turnover
€1 million flat

Correct answer: €20 million or 4% of global annual turnover, whichever is higher

The upper tier is €20M or 4% of worldwide annual turnover, whichever is greater.

Question 41: When facing an unfamiliar challenge in security & access control within Certified Web Analyst, what is the BEST approach?

Avoid the challenge if possible
Apply the most familiar technique regardless of suitability
Research established best practices, consult colleagues, and document the approach (Correct answer)
Attempt to resolve it independently without consultation

Correct answer: Research established best practices, consult colleagues, and document the approach

Researching best practices and consulting colleagues combines established knowledge with practical experience, while documentation supports future reference.

Question 42: Which configuration documents what is tracked, how, and why for later audits?

A sitemap
A measurement plan / tracking specification (Correct answer)
A robots.txt file
A cookie banner

Correct answer: A measurement plan / tracking specification

A measurement plan or tracking spec records requirements and implementation details.

Question 43: Why is privacy important in web analytics?

To sell user data.
To collect more data.
To ignore user rights.
To protect user data and trust (Correct answer)

Correct answer: To protect user data and trust

Privacy is paramount in web analytics to protect user data and maintain trust between users and websites. Adhering to privacy regulations (like GDPR or CCPA) ensures that personal information is collected, stored, and used responsibly and ethically. Prioritizing privacy builds user confidence, avoids legal penalties, and fosters a more transparent online environment.

Question 44: What is 'error rate' as a UX metric?

The percentage of form submissions rejected by server validation
The number of JavaScript console errors per user session
The frequency at which users make mistakes while attempting to complete a task (Correct answer)
The percentage of 404 error pages on a website

Correct answer: The frequency at which users make mistakes while attempting to complete a task

UX error rate tracks how often users make incorrect actions during tasks, indicating design problems that need attention to improve usability.

Question 45: In Certified Web Analyst, how does implementation & configuration contribute to professional credibility?

By avoiding challenging situations
By demonstrating competence, maintaining standards, and delivering consistent results (Correct answer)
Through the number of years in practice alone
By using impressive terminology

Correct answer: By demonstrating competence, maintaining standards, and delivering consistent results

Professional credibility is built through demonstrated competence, consistent adherence to standards, and reliable delivery of quality results.

Question 46: What is cross-domain tracking designed to preserve?

Server uptime across regions
A single user's session and identity as they move between your owned domains (Correct answer)
Page load speed between domains
Email deliverability

Correct answer: A single user's session and identity as they move between your owned domains

It passes the client identifier between domains so one visit isn't split into separate sessions.

Question 47: What is the benefit of keeping an unfiltered raw data view or backup?

It loads reports faster
It removes the need for QA
It increases sampling
It preserves unaltered data in case filters or settings cause errors (Correct answer)

Correct answer: It preserves unaltered data in case filters or settings cause errors

A raw view lets you recover from misconfigured filters.

Question 48: A periodic review of who has access to analytics properties is called what?

Funnel analysis
User access review (Correct answer)
Cohort review
Sampling audit

Correct answer: User access review

Access reviews catch stale or excessive permissions.

Question 49: Which UTM parameter is required for Google Analytics to attribute a campaign visit reliably?

utm_id only
utm_term
utm_content
utm_source (Correct answer)

Correct answer: utm_source

utm_source identifies the traffic origin and is the core required parameter for campaign tagging.

Question 50: What does a data retention setting control?

Which browsers are supported
How fast pages load
The number of tags
How long user-level and event-level data is stored (Correct answer)

Correct answer: How long user-level and event-level data is stored

Retention defines the period after which granular user data is deleted.

Question 51: Referral spam appearing in reports most directly affects interpretation by doing what?

Reducing cookie usage
Blocking real users
Inflating sessions and distorting engagement metrics for a source (Correct answer)
Improving conversion accuracy

Correct answer: Inflating sessions and distorting engagement metrics for a source

Fake referral hits add low-quality sessions that skew source, bounce, and engagement analysis.

Question 52: Why is a raw, unfiltered data view/property commonly kept in a setup?

To avoid using cookies
To double traffic counts
To hold passwords
As a backup in case a filter is misconfigured (Correct answer)

Correct answer: As a backup in case a filter is misconfigured

Filters are often irreversible on stored data, so a raw copy protects against mistakes.

Question 53: What does 'Net Promoter Score' (NPS) measure?

The number of new users acquired per month
Users' likelihood to recommend a product or service to others (Correct answer)
Website page loading speed
A website's search engine ranking position

Correct answer: Users' likelihood to recommend a product or service to others

NPS measures customer loyalty and satisfaction by asking users how likely they are to recommend the product on a 0–10 scale, categorizing them as Promoters, Passives, or Detractors.

Question 54: What is the 'System Usability Scale' (SUS)?

A framework for evaluating social media platform usability
A standardized 10-item questionnaire for measuring perceived usability (Correct answer)
A scale for rating a website's SEO health score
A tool for benchmarking web server performance

Correct answer: A standardized 10-item questionnaire for measuring perceived usability

The SUS is a reliable, cost-effective questionnaire using 10 Likert-scale statements to produce a single usability score between 0 and 100.

Question 55: What is 'user segmentation' in behavioral analysis?

Dividing a website into separate sections for different user types
Creating different page variants for different audience groups
Separating legitimate human traffic from automated bot traffic
Grouping users based on shared behaviors, demographics, or characteristics for targeted analysis (Correct answer)

Correct answer: Grouping users based on shared behaviors, demographics, or characteristics for targeted analysis

User segmentation allows analysts to compare behavior patterns across distinct groups, enabling more targeted optimization decisions and personalized experiences.

Question 56: What is an event in web analytics?

Page loading speed.
Website downtime.
Internet connection type.
A user interaction like clicks (Correct answer)

Correct answer: A user interaction like clicks

In web analytics, an event refers to any specific user interaction with a website or app that is tracked independently of a page load. Examples include clicks on buttons, video plays, form submissions, downloads, or scrolling to a certain point. Tracking events provides a deeper understanding of user engagement beyond simple page views, revealing how users interact with specific elements.

Question 57: What does Time to First Byte (TTFB) primarily indicate?

Server and network responsiveness to the initial request (Correct answer)
Time to render the largest element
Time until the page is fully interactive
Visual stability of the page

Correct answer: Server and network responsiveness to the initial request

TTFB measures how long the browser waits for the first byte of the response, reflecting server and network latency.

Question 58: Which tool class is best suited to automatically crawl pages and verify tags fire correctly?

A CSS preprocessor
A spreadsheet pivot table
An email scheduler
A headless browser such as Puppeteer or Playwright (Correct answer)

Correct answer: A headless browser such as Puppeteer or Playwright

Headless browsers load pages like a user and can inspect network requests and dataLayer.

Question 59: What does 'micro-interaction' analysis focus on in UX analytics?

Detailed examination of small, specific user interactions like hover states, button animations, or form field focus events (Correct answer)
User interactions exclusively on small-screen mobile devices
Interactions lasting under one second in session recordings
User engagement with micro-content formats like icons or tooltips

Correct answer: Detailed examination of small, specific user interactions like hover states, button animations, or form field focus events

Micro-interaction analysis examines how users respond to small UI feedback moments, which collectively shape the overall perception of a product's polish and usability.

Question 60: What is the 'novelty effect' in A/B testing?

When users prefer a new feature because it is genuinely superior
The effect of testing too many variants simultaneously
A statistical adjustment for small sample sizes
A temporary spike in engagement for a new variant that fades as users adjust (Correct answer)

Correct answer: A temporary spike in engagement for a new variant that fades as users adjust

The novelty effect occurs when users engage more with a new variant simply because it is different, not because it is better, causing inflated early results.

DAA Certified Web Analyst (CWA)

The CWA certification by the Digital Analytics Association validates professionals' broad domain knowledge of web analytics, including data collection, user behavior analysis, attribution, implementation, and governance. It tests practical problem-solving ability across the full web analytics business spectrum rather than proficiency in any specific tool.

Questions

120 min

Time Limit

60%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds

These practice questions were written with AI tools. They are not real exam questions. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

wpicert.org — Eligibility, passing score, retake policy, test delivery, exam format, score validity · verified Nov 2026