GIAC · Official Blueprint · Last reviewed May 2026
The official GIAC GPEN exam covers 15 domains. The vendor does not publish percentage weights for these domains — treat each as an equal part of the exam blueprint.
Covers the topics, concepts, and applied skills examined under the Attacking Password Hashes domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Attacking Password Hashes questionsCovers the topics, concepts, and applied skills examined under the Password Attacks and Formats domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Password Attacks and Formats questionsCovers the topics, concepts, and applied skills examined under the Scanning and Host Discovery domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Scanning and Host Discovery questionsCovers the topics, concepts, and applied skills examined under the Metasploit domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Metasploit questionsCovers the topics, concepts, and applied skills examined under the Vulnerability Scanning domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Vulnerability Scanning questionsCovers the topics, concepts, and applied skills examined under the Kerberos Attacks domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Kerberos Attacks questionsCovers the topics, concepts, and applied skills examined under the Reconnaissance domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Reconnaissance questionsCovers the topics, concepts, and applied skills examined under the Command and Control domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Command and Control questionsCovers the topics, concepts, and applied skills examined under the Exploitation Fundamentals domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Exploitation Fundamentals questionsCovers the topics, concepts, and applied skills examined under the Azure AD Integration domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Azure AD Integration questionsCovers the topics, concepts, and applied skills examined under the Domain Escalation and Persistence domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Domain Escalation and Persistence questionsCovers the topics, concepts, and applied skills examined under the Azure Apps and Attacks domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Azure Apps and Attacks questionsCovers the topics, concepts, and applied skills examined under the Escalation and Exploitation domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Escalation and Exploitation questionsCovers the topics, concepts, and applied skills examined under the Advanced Password Attacks domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Advanced Password Attacks questionsCovers the topics, concepts, and applied skills examined under the Pen Test Planning domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Pen Test Planning questionsThe vendor does not currently publish percentage weights for these domains, so Courseiva does not rank them by weight.
Work through each domain systematically — cover fundamentals first, then applied and scenario-based topics.
Never skip a domain regardless of perceived importance. Full coverage is required to pass.
Use Courseiva domain analytics to track your accuracy per domain and route extra questions to your weak areas.
Courseiva tracks your accuracy per domain automatically and routes you toward your weakest areas — no manual configuration needed.