OSCP - Offensive Security Certified Professional Practice Test

OSCP - Offensive Security Certified Professional Practice Test

 ▶
  • The OSCP+ exam assesses practical penetration testing through hands-on tasks in a lab environment. (OffSec)
  • After exhausting the OSCP+ standalone package's attempts, a candidate can purchase a regular exam retake for US$249. (OffSec)
  • OSCP+ candidates must wait four weeks after their first failed exam, eight weeks after their second, and twelve weeks after their third and subsequent failures. (OffSec)
  • The OSCP certification remains valid indefinitely. (OffSec)
  • The OSCP+ designation expires three years after issuance unless renewed. (OffSec)
  • OSCP+ holders using the CPE renewal route must earn 120 credits over three years and maintain annual coverage through OffSec's Annual Membership Program or Annual Maintenance Fee. (OffSec)
  • The OSCP+ exam is remotely delivered through a private VPN and is proctored. (OffSec)
  • OSCP exam enrollment normally requires age 18, while candidates aged 16 or 17 must complete OffSec's special application and approval process. (OffSec)
  • OSCP+ pass/fail results are emailed within ten business days after the candidate submits the required documentation. (OffSec)

Facts verified Oct 15, 2026 against OffSec. Dates that have passed are removed automatically.

OSCP Exam at a Glance

ItemDetailOfficial source
Number of questionsHands-on penetration testing examinationOffSec
Retake feeUS$249 per additional retakeOffSec
Retake policyWait 4, 8, then 12 weeks after successive failuresOffSec
Validity (OSCP)LifetimeOffSec
Validity (OSCP+)Three yearsOffSec
Renewal (OSCP+)CPE route: 120 credits per three years plus annual coverageOffSec
DeliveryOnline, proctored practical examinationOffSec
EligibilityNormally 18+; ages 16–17 require approvalOffSec
Score releaseWithin 10 business days after report submissionOffSec
Testing windowIndividual appointments, subject to availabilityOffSec

Facts verified Oct 15, 2026 against OffSec. Dates that have passed are removed automatically.

Free OSCP - Offensive Security Certified Professional Study Tools

Interactive OSCP - Offensive Security Certified Professional resources on PracticeTestGeeks, free to start:

OSCP Practice Test Questions

Prepare for the OSCP - Offensive Security Certified Professional exam with our free practice test modules. Each quiz covers key topics to help you pass on your first try.

OSCP Buffer Overflow
OSCP Exam Questions covering Buffer Overflow. Master OSCP Test concepts for certification prep.
OSCP Kali Linux
Free OSCP Practice Test featuring Kali Linux. Improve your OSCP Exam score with mock test prep.
OSCP Linux
OSCP Mock Exam on Linux. OSCP Study Guide questions to pass on your first try.
OSCP Network Scanning and Enumeration
OSCP Test Prep for Network Scanning and Enumeration. Practice OSCP Quiz questions and boost your score.
OSCP Password Attacks and Cracking
OSCP Questions and Answers on Password Attacks and Cracking. Free OSCP practice for exam readiness.
OSCP Windows Privilege Escalation
OSCP Mock Test covering Windows Privilege Escalation. Online OSCP Test practice with instant feedback.
Start Practice Test
Review the exam content outline
Take a diagnostic practice test
Create a study schedule
Focus on weak areas
Complete full practice exams

Sample OSCP - Offensive Security Certified Professional Practice Questions

Try these questions from our free OSCP - Offensive Security Certified Professional practice tests. The correct answer and an explanation follow each question.

  1. What tool is best suited for enumerating SMB shares on a Windows target during an OSCP engagement?

    • A. dirb
    • B. enum4linux
    • C. gobuster
    • D. wfuzz

    Answer: B. enum4linux

    Enum4linux is a tool for enumerating information from Windows and Samba systems, including shares, users, groups, and password policies.

  2. An OSCP candidate finds a writable /etc/passwd file. Which entry would add a passwordless root-equivalent account?

    • A. hacker:x:0:0::/root:/bin/bash
    • B. hacker::0:0::/root:/bin/bash
    • C. hacker:*:1001:1001::/home/hacker:/bin/bash
    • D. hacker:!:0:0::/root:/bin/bash

    Answer: B. hacker::0:0::/root:/bin/bash

    An empty password field (::) in /etc/passwd means no password is required, and UID/GID of 0 grants root-level privileges.

  3. When enumerating NFS shares during OSCP, which command shows available exports on a target?

    • A. showmount -e
    • B. nfsstat -m
    • C. mount -t nfs :/
    • D. rpcinfo --list

    Answer: A. showmount -e

    The 'showmount -e' command queries the NFS server and displays its list of exported directories along with any access restrictions.

  4. What Nmap script category is most useful for initial service version detection during OSCP enumeration?

    • A. --script=exploit
    • B. --script=auth
    • C. --script=default
    • D. --script=vuln

    Answer: C. --script=default

    The 'default' script category runs commonly useful scripts that are safe, reliable, and provide helpful service information without being intrusive.

Take the full OSCP - Offensive Security Certified Professional practice test

How do I prepare for the OSCP exam?

Start with practice tests, create a study schedule, and focus on weak areas.

What is the passing score?

Most exams require 70-75%. Check the official guide for exact requirements.

How long is the exam?

Typically 2-3 hours. Time management is key to success.

How many questions are on the OSCP?

The OSCP+ exam assesses practical penetration testing through hands-on tasks in a lab environment. (Verified Oct 15, 2026 against OffSec.)
▶ Start Quiz