GIAC (SANS)

GIAC Penetration Tester (GPEN)

GPEN

The GIAC Penetration Tester (GPEN) certification validates your ability to conduct professional penetration tests using effective techniques and methodologies. It is designed for security professionals who assess networks and systems, including penetration testers, ethical hackers, and red team members. Earning GPEN proves you can perform detailed reconnaissance, execute exploits, and deliver rigorous, actionable reporting.

Practice Free Questions

5Domains

16Objectives

135Practice pages

642Free questions

GPEN free practice questions

Choose any objective and open any question page — no sign-in required.

Penetration Test Planning

32 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–32

Reconnaissance

57 questions · 12 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–55 56–57

Scanning and Host Discovery

43 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–43

Vulnerability Scanning

25 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–25

Exploitation Fundamentals

40 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40

Escalation and Exploitation

38 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–38

Metasploit

28 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–28

Command and Control (C2)

35 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35

Password Formats and Hashes

39 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–39

Password Attacks

57 questions · 12 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–55 56–57

Attacking Password Hashes

31 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–31

Advanced Password Attacks

51 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–51

Kerberos Attacks

45 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45

Domain Escalation and Persistence Attacks

51 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–51

Azure Overview, Attacks, and AD Integration

39 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–39

Azure Applications and Attack Strategies

31 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–31

Want a smarter study session?Try adaptive questions aimed at your weak spots, the illustrated book, and readiness you can trust.

Continue Free Practice

Percentages reflect share of the current practice bank, not official exam weightings. Every page above is a live, crawlable practice page (16 objectives · 135 pages).

GIAC Penetration Tester (GPEN)

GPEN free practice questions

Domain 1 · Penetration Testing Foundations24% of practice bank · 4 objectives · 157 questions24%

Domain 2 · Exploitation and Post-Exploitation22% of practice bank · 4 objectives · 141 questions22%

Domain 3 · Password Attacks and Credential Attacks28% of practice bank · 4 objectives · 178 questions28%

Domain 4 · Active Directory Attacks15% of practice bank · 2 objectives · 96 questions15%

Domain 5 · Cloud and Azure Attacks11% of practice bank · 2 objectives · 70 questions11%