Courseiva

GPEN · 15 domains

Practice GPEN by domain

298 practice questions across 15 domains. Pick a topic to target weak areas.

EasyMediumHard

Advanced Password Attacks

26 questions · 2 easy · 17 medium · 7 hard

Attacking Password Hashes

23 questions · 4 easy · 12 medium · 7 hard

Azure Apps and Attacks

11 questions · 1 easy · 6 medium · 4 hard

Command and Control

24 questions · 2 easy · 14 medium · 8 hard

Escalation and Exploitation

17 questions · 3 easy · 5 medium · 9 hard

Exploitation Fundamentals

20 questions · 3 easy · 11 medium · 6 hard

Kerberos Attacks

20 questions · 3 easy · 13 medium · 4 hard

Metasploit

15 questions · 4 easy · 6 medium · 5 hard

Password Attacks and Formats

19 questions · 4 easy · 14 medium · 1 hard

Pen Test Planning

31 questions · 6 easy · 17 medium · 8 hard

Reconnaissance

22 questions · 6 easy · 11 medium · 5 hard

Scanning and Host Discovery

17 questions · 4 easy · 6 medium · 7 hard

Vulnerability Scanning

22 questions · 5 easy · 10 medium · 7 hard

Frequently asked questions

How are GPEN exam questions divided by domain?
The GIAC Penetration Tester exam covers 15 domains. Each domain carries a specific percentage weight in the exam blueprint. Practicing by domain lets you allocate study time according to each domain's weight.
How many questions should I practice per domain?
Start with a 10-question session to identify your baseline. Once you can consistently score above 80%, move to a 20–30 question session to test depth. Revisit weaker domains before your exam date.
Can I practice all domains for free?
Yes — all domain practice sessions on Courseiva are free. Create a free account to track your results across sessions and see which domains need the most attention.