Overview
GPEN: Penetration Tester is a GIAC credential. Prep for GIAC GPEN. Pen test planning, recon, scanning, exploitation, password attacks, Kerberos, Azure and Entra ID attacks. This PathKey™ guide summarizes the domains, format, cost signals, eligibility, and renewal pattern so you can decide before you book. Accumentum is an Army CA and Air Force COOL Approved Vendor. We teach preparation for the GIAC exam. GIAC sets exam content, fees, and policies.
Accumentum is an Army CA and Air Force COOL Approved Vendor. We teach preparation for the GIAC exam. GIAC sets exam content, fees, and policies.
Who it is for
- Penetration testers and ethical hackers.
- Red team and blue team members.
- Security staff who assess networks and systems.
Exam domains
Weights follow the official outline.
- 01
Penetration Test Planning
Scoping, rules of engagement and a process-driven test, and Reporting what you found.
- 02
Reconnaissance
Finding high level information about the target organization and network.
- 03
Scanning and Host Discovery
Port, OS and service version scans, and Reading the results.
- 04
Vulnerability Scanning
Running vulnerability scans and analyzing the output.
- 05
Exploitation, Metasploit and Pivoting
Exploitation fundamentals, Metasploit at an intermediate level, and Data exfiltration and pivoting to other hosts.
- 06
Password Attacks
Password formats and hashes, Guessing, obtaining and cracking hashes, and Advanced authentication attacks.
- 07
Active Directory and Kerberos Attacks
Windows privilege escalation, Kerberos attacks, and Domain escalation and persistence.
- 08
Azure and Entra ID Attacks
Entra ID basics and common attacks, and Azure applications, federation and single sign-on attacks.
Exam format and cost
- Questions
- 82
- Duration
- Confirm on the vendor site
- Format
- Confirm question format on the vendor outline
- Passing score
- 73
- Cost
- Confirm the current exam fee on the vendor site before you register
- Delivery
- Vendor-approved test center or online proctoring (confirm on the vendor site)
- Languages
- Confirm available languages on the vendor site
Experience and eligibility
There are no enrollment prerequisites and GIAC doesn't require any to sit GPEN. You should know networking, Windows and Linux well and be comfortable at the command line. PenTest+, CEH or GCIH level knowledge helps.
Renewal
Renewal rules for GPEN: Penetration Tester are set by GIAC. Many credentials use a multi-year cycle with continuing education, a renewal fee, or a newer exam. Confirm the current cycle on the vendor site.
Roles this credential fits
- Pen test planning and scoping, recon, scanning, vulnerability scanning, Metasploit, exploitation and pivoting, password attacks, Kerberos and domain persistence, C2, and Azure and Entra ID attacks, aligned with GIAC's published GPEN objectives.
- Penetration Testing
- Teams standardizing on this credential for hiring or compliance
GPEN questions
Is GPEN worth it?
GPEN is worth it when employers or contracts in your market ask for GIAC proof, or when the domains match work you already do or want next. Common roles include Pen test planning and scoping, recon, scanning, vulnerability scanning, Metasploit, exploitation and pivoting, password attacks, Kerberos and domain persistence, C2, and Azure and Entra ID attacks, aligned with GIAC's published GPEN objectives., Penetration Testing, and Teams standardizing on this credential for hiring or compliance. Read the roles and domains on this page, then decide against your timeline and budget.
How hard is GPEN?
You get 82 questions in Confirm on the vendor site. Format: Confirm question format on the vendor outline. Passing score: 73. There are no enrollment prerequisites and GIAC doesn't require any to sit GPEN. People who pass usually mix domain study with timed practice, not reading alone.
Does GPEN expire?
Renewal rules for GPEN: Penetration Tester are set by GIAC. Many credentials use a multi-year cycle with continuing education, a renewal fee, or a newer exam. Confirm the current cycle on the vendor site.
How does Accumentum help with GPEN?
We offer Expert-led training mapped to the GPEN domains, PathPay® payment options, PathPass™ practice where the exam is in our catalog, and military funding support where you qualify. We are an Army CA and Air Force COOL Approved Vendor. Our pass rate across Accumentum certification attempts since August 2022 is 98.8% (2,412 certified of about 2,441 attempts).
How much does the GPEN exam cost?
Published pricing for GPEN: Confirm the current exam fee on the vendor site before you register. Vendors change voucher prices without notice, so confirm on the official store before you buy. PathPay® can spread Accumentum course tuition when you train with us.
What are the GPEN prerequisites?
There are no enrollment prerequisites and GIAC doesn't require any to sit GPEN. You should know networking, Windows and Linux well and be comfortable at the command line. PenTest+, CEH or GCIH level knowledge helps.
What should I take after GPEN?
After GPEN, pick the next credential that matches the job you want, not a generic ladder. Use the roles on this page and neighboring PathKey™ guides from the same vendor to plan the sequence. If you need a readiness check first, start with ReadyScore™ when we offer one for this exam.
Official sources
Always confirm fees, dates, and eligibility on the vendor site before you register. Vendors change outlines and prices without notice.