OffSec · Official Blueprint · Last reviewed May 2026
The official OffSec PEN-200 exam covers 11 domains. The vendor does not publish percentage weights for these domains — treat each as an equal part of the exam blueprint.
Covers the topics, concepts, and applied skills examined under the Client-Side Attacks domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Client-Side Attacks questionsCovers the topics, concepts, and applied skills examined under the Enumeration and Reconnaissance domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Enumeration and Reconnaissance questionsCovers the topics, concepts, and applied skills examined under the Active Directory Attacks domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Active Directory Attacks questionsCovers the topics, concepts, and applied skills examined under the Public Exploits domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Public Exploits questionsCovers the topics, concepts, and applied skills examined under the Web Application Attacks domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Web Application Attacks questionsCovers the topics, concepts, and applied skills examined under the Linux Privilege Escalation domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Linux Privilege Escalation questionsCovers the topics, concepts, and applied skills examined under the Buffer Overflow Fundamentals domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Buffer Overflow Fundamentals questionsCovers the topics, concepts, and applied skills examined under the Port Redirection and Tunneling domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Port Redirection and Tunneling questionsCovers the topics, concepts, and applied skills examined under the Antivirus Evasion domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Antivirus Evasion questionsCovers the topics, concepts, and applied skills examined under the Password Attacks domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Password Attacks questionsCovers the topics, concepts, and applied skills examined under the Windows Privilege Escalation domain. Study the official exam objectives and practise questions in this area to build confidence and accuracy before your exam.
Practice Windows Privilege Escalation questionsThe vendor does not currently publish percentage weights for these domains, so Courseiva does not rank them by weight.
Work through each domain systematically — cover fundamentals first, then applied and scenario-based topics.
Never skip a domain regardless of perceived importance. Full coverage is required to pass.
Use Courseiva domain analytics to track your accuracy per domain and route extra questions to your weak areas.
Courseiva tracks your accuracy per domain automatically and routes you toward your weakest areas — no manual configuration needed.