How I passed the GPEN exam for the first time
In September 2022, I passed the GIAC Penetration Tester Certification (GPEN) exam with 89%, which I am quite happy about. Let me explain this in more detail.
Why GPEN?
Well, it is still a very valuable qualification for those wanting to enter Cyber Security as Pen Testers. All GIAC certifications are widely recognised and highly desirable in today's job market, and if your employer is willing to pay for it, then you should not pass up such an opportunity! So if you have the privilege to go to one of these 5-day in-person trainings, you will learn from security professionals with decades of experience. As it is stated on their website, "The GIAC Penetration Tester (GPEN) certification validates a practitioner's ability to properly conduct a penetration test using best-practice techniques and methodologies. GPEN certification holders have the knowledge and skills to conduct exploits, engage in detailed environmental reconnaissance, and utilise a process-oriented approach to penetration testing projects
My journey to GPEN
I was in the middle of preparing for my OSCP exam when I took this sudden detour and decided to study for the GPEN. Looking back, I am still not sure why I did it, but I guess the main reason was that I felt that the study material could help me understand the practical part of pen testing, especially Kerberos. I also obtained the CEH Master certificate not so long before, which was very helpful, but I felt that something was missing. Anyway, I bought the book GPEN GIAC Certified Penetration Tester All-in-One Exam Guide, studied it and did all the very nice practice tests, but when I checked out the Exam Certification Objectives & Outcome Statements, I realised that the Azure-related topics were missing from my study book, so I had to do more research online. I have found this resource recently very helpful (I cannot find the blog from 2 years ago...): How to pass the GPEN on medium.com. I also bought a few mock exams/practice tests from SANS, which gave me the final push to go for the exam.
On exam day
It is a proctored exam! I remember the proctor was very thorough. She even asked me to show my computer glasses inside out as if there was some spy camera hidden in them, just like in Mission Impossible. At any rate, the exam went well, but it was a bit nerve-racking as there were some questions I had never seen before. However, all the hard study and practice paid off well as I passed with 89%! I couldn't believe it, but it was real. And more importantly, it was worth it.
Udemy Practice exams for GPEN
I am fully aware that none of the mock exams you can find online, including the ones I am selling, is perfect as the courses run by SANS are very specific and once somebody bought their course(s) for thousands of pounds directly from them will receive some (e)books that will prepare students successfully for the actual exam as SANS wants learners to give some specific answers to specific questions. So, unless you pay the current price of $8780, you will have to rely on other online resources from here, there and everywhere to gather the necessary information. Still, I am here to help you and make this experience easier.
That is why I prepared two sets of 82 questions to help students pass this exciting exam. A third may be coming soon, so please stay tuned! Feel free to use the discounted coupon here. Ultimately, please don't hesitate to contact me if you have any questions.
Useful Resources
Objectives - Look out for the new module called "Command and Control (C2)"
Mapping Attack surface for Azure
Three ways to get SANS training - worth watching, you never know.
My explanations include other useful links and resources. Once you buy the two mock exams I am selling on Udemy for £19.99, you'll have access to them!