385 practice questions for GIAC Penetration Tester (GPEN), with full explanations.
Every question comes with the correct answer and a clear explanation. Mapped to the current GPEN exam objectives.
- 385 questions mapped to the GPEN exam objectives
- Answers and explanations for every question, including the wrong options
- A questions-only PDF for timed practice runs
- Instant delivery by email the moment you check out
- Free monthly updates for as long as the exam is live
- Pass or your money back
The GPEN costs US$999 per attempt. This pack is US$39, paid once.
Try 10 questions free before you buy.
Last updated September 2026 · 385 questions
What makes the GPEN hard
The GPEN tests whether a candidate can actually conduct a penetration test, not just talk about one. It is 82 questions in three hours, open book, with a 73% pass mark.
The exam covers the full attack lifecycle: scoping and reconnaissance, scanning and enumeration, exploitation, password attacks, privilege escalation, lateral movement, persistence, and web application attacks. It is methodology driven, so knowing individual techniques is not enough; the pieces need to fit together across a real engagement. With only 82 questions, every one carries more than a full percentage point of the score.
This pack has 385 practice questions for the GPEN, useful for finding the gaps before GIAC does, especially in areas candidates tend to underestimate, such as post-exploitation methodology and reporting requirements.
About the exam
The GPEN validates hands-on skill in planning and executing penetration tests against enterprise targets. It covers the full attack lifecycle using real tools and techniques, making it one of the most respected offensive security certifications available. It is aligned to SANS SEC560 and mapped to DoD 8140.
Exam topics
- Penetration testing methodology: scoping, rules of engagement, reporting
- Reconnaissance: passive and active information gathering
- Scanning and enumeration: identifying targets, services, and vulnerabilities
- Exploitation: attacking systems using known vulnerabilities and misconfigurations
- Password attacks: cracking, spraying, and credential reuse techniques
- Post-exploitation: privilege escalation, lateral movement, persistence
- Web application attacks: common application-layer exploitation techniques
82 questions, 3 hours, passing score 73%, open book, US$999 per attempt, valid 4 years, maps to DoD 8140.
Reviews
There are no reviews yet.