Courseiva

PEN-200 · 11 domains

Practice PEN-200 by domain

285 practice questions across 11 domains. Pick a topic to target weak areas.

EasyMediumHard

Active Directory Attacks

22 questions · 5 easy · 10 medium · 7 hard

Antivirus Evasion

34 questions · 7 easy · 18 medium · 9 hard

Buffer Overflow Fundamentals

32 questions · 8 easy · 17 medium · 7 hard

Client-Side Attacks

25 questions · 6 easy · 10 medium · 9 hard

Enumeration and Reconnaissance

33 questions · 6 easy · 18 medium · 9 hard

Linux Privilege Escalation

18 questions · 5 easy · 9 medium · 4 hard

Password Attacks

23 questions · 6 easy · 12 medium · 5 hard

Port Redirection and Tunneling

20 questions · 6 easy · 11 medium · 3 hard

Public Exploits

27 questions · 7 easy · 12 medium · 8 hard

Web Application Attacks

27 questions · 6 easy · 15 medium · 6 hard

Windows Privilege Escalation

24 questions · 2 easy · 15 medium · 7 hard

Frequently asked questions

How are PEN-200 exam questions divided by domain?
The OffSec PEN-200 / OSCP Concepts exam covers 11 domains. Each domain carries a specific percentage weight in the exam blueprint. Practicing by domain lets you allocate study time according to each domain's weight.
How many questions should I practice per domain?
Start with a 10-question session to identify your baseline. Once you can consistently score above 80%, move to a 20–30 question session to test depth. Revisit weaker domains before your exam date.
Can I practice all domains for free?
Yes — all domain practice sessions on Courseiva are free. Create a free account to track your results across sessions and see which domains need the most attention.