NEWEST GIAC PENETRATION
TESTER (GPEN) EXAM | Q&A WITH
RATIONALES
1. What is the GIAC Penetration Tester (GPEN)
certification designed to validate?
A) Basic knowledge of network security
concepts
B) The ability to properly conduct a penetration
test using best-practice techniques and
methodologies
C) Skills in secure software development
D) IT governance and compliance knowledge
Correct answer: B
Rationale: The GPEN certification validates a
practitioner's ability to properly conduct a
penetration test, employing effective
techniques and methodologies to find and
exploit network and system vulnerabilities .
,2. Which organization administers the GPEN
certification?
A) CompTIA
B) EC-Council
C) SANS Institute / GIAC
D) ISACA
Correct answer: C
Rationale: The GPEN certification is
administered by the Global Information
Assurance Certification (GIAC), a well-
respected vendor that offers numerous globally
recognized information security certifications .
3. What is the official training course associated
with the GPEN certification?
A) PEN-200
B) SEC560: Enterprise Penetration Testing
C) WEB-300
D) SEC504: Hacker Tools, Techniques, and
Incident Handling
Correct answer: B
,Rationale: The official training course for the
GPEN certification is SANS SEC560: Enterprise
Penetration Testing, which provides the core
knowledge tested in the exam .
4. How many questions are on the GPEN exam?
A) 60 questions
B) 75 questions
C) 82 questions
D) 100 questions
Correct answer: C
Rationale: The GPEN certification exam consists
of 82 questions .
5. What is the duration of the GPEN exam?
A) 2 hours
B) 3 hours
C) 4 hours
D) 6 hours
Correct answer: B
, Rationale: The GPEN exam is 3 hours long .
6. What is the minimum passing score for the
GPEN exam?
A) 65%
B) 70%
C) 73%
D) 80%
Correct answer: C
Rationale: As of the exam version released on or
after July 12, 2025, the minimum passing score
for the GPEN exam is 73% .
7. How is the GPEN exam delivered?
A) In-person only
B) Web-based with remote or onsite proctoring
C) Open-book, take-home exam
D) Performance-based lab exam only
Correct answer: B
TESTER (GPEN) EXAM | Q&A WITH
RATIONALES
1. What is the GIAC Penetration Tester (GPEN)
certification designed to validate?
A) Basic knowledge of network security
concepts
B) The ability to properly conduct a penetration
test using best-practice techniques and
methodologies
C) Skills in secure software development
D) IT governance and compliance knowledge
Correct answer: B
Rationale: The GPEN certification validates a
practitioner's ability to properly conduct a
penetration test, employing effective
techniques and methodologies to find and
exploit network and system vulnerabilities .
,2. Which organization administers the GPEN
certification?
A) CompTIA
B) EC-Council
C) SANS Institute / GIAC
D) ISACA
Correct answer: C
Rationale: The GPEN certification is
administered by the Global Information
Assurance Certification (GIAC), a well-
respected vendor that offers numerous globally
recognized information security certifications .
3. What is the official training course associated
with the GPEN certification?
A) PEN-200
B) SEC560: Enterprise Penetration Testing
C) WEB-300
D) SEC504: Hacker Tools, Techniques, and
Incident Handling
Correct answer: B
,Rationale: The official training course for the
GPEN certification is SANS SEC560: Enterprise
Penetration Testing, which provides the core
knowledge tested in the exam .
4. How many questions are on the GPEN exam?
A) 60 questions
B) 75 questions
C) 82 questions
D) 100 questions
Correct answer: C
Rationale: The GPEN certification exam consists
of 82 questions .
5. What is the duration of the GPEN exam?
A) 2 hours
B) 3 hours
C) 4 hours
D) 6 hours
Correct answer: B
, Rationale: The GPEN exam is 3 hours long .
6. What is the minimum passing score for the
GPEN exam?
A) 65%
B) 70%
C) 73%
D) 80%
Correct answer: C
Rationale: As of the exam version released on or
after July 12, 2025, the minimum passing score
for the GPEN exam is 73% .
7. How is the GPEN exam delivered?
A) In-person only
B) Web-based with remote or onsite proctoring
C) Open-book, take-home exam
D) Performance-based lab exam only
Correct answer: B
