PrepForCerts

OFFENSIVE SECURITY OSCP / EXAM REFERENCE Know the exam format.
Prepare with a clear plan.

The OffSec OSCP exam is a 23-hour 45-minute hands-on penetration test with no multiple-choice questions.

Published by PrepForCerts · Editorial responsibility and sources · Updated

How Many Questions Are on the OSCP Exam? Complete 2026 Guide

Current exam and certification facts

The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024. The OSCP credential remains valid for life. The separate OSCP+ designation expires after three years unless you meet current OffSec maintenance and renewal requirements. Loss of the + designation does not remove the lifetime OSCP credential.

Study schedules below are planning examples. Confirm current fees, exam delivery, and eligibility with the provider before booking.

Official oscp reference · Official oscpRenew reference

The OSCP exam has zero traditional questions. It is a 23-hour 45-minute hands-on penetration test where you compromise multiple machines and submit proof. After the practical, you have 24 hours to write a professional report. OSCP is the gold standard for penetration testing certifications.

Pay varies by role, location, experience, and skills. Compare current job listings; certification alone does not guarantee a salary.

0
MC Questions
23h 45m
Practical Exam
70/100
Passing Score
$1,649+
Course + Exam

Exam Format

ComponentDetailsPoints
Active Directory Set (3 machines)Full AD chain: initial access → lateral movement → domain admin40
Standalone Machine 1Full exploitation + privilege escalation20
Standalone Machine 2Full exploitation + privilege escalation20
Standalone Machine 3Full exploitation + privilege escalation20
The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.Course exercises and lab report10
Strategy: AD set (40) + 2 standalones (40) = 80 points. Focus on AD chain first — highest value and most in-demand skill.

The 48-Hour Marathon

Phase 1: Practical (23h 45m)

Phase 2: Report (24 hours)

Professional report with executive summary, detailed findings, reproduction steps, screenshots, and remediation recommendations.

OSCP vs. Alternatives

CertFormatDurationCost
OSCPHands-on + report~48 hrs$1,649+
CEH125 MC4 hrs$1,199
PenTest+85 MC+PBQ165 min$392
GPEN82-115 questions3 hrs$2,499

Preparation

Frequently Asked Questions

Questions?

Zero MC. 23h 45m hands-on pentest.

Passing score?

70/100 points plus professional report.

How hard?

One of the hardest cybersecurity certs.

Duration?

~48 hours total (practical + report).

What's tested?

Enumeration, exploitation, privesc, AD, reporting.

Prep time?

3-6 months intensive; 6-12 for beginners.

Cost?

$1,649+ for course + exam.

Metasploit?

Limited — exploit modules on one target only.

Practice Offensive Security Concepts

Build penetration testing knowledge with practice questions.

Start Free Practice Test →

Related Resources

Plan your preparation

Planning your study schedule for Offensive Security OSCP? Understanding the exact exam format—including question count and time limits—helps you practice effectively for OSCP success.

The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.

The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.

Questions
Practical lab exam
Time Limit
24 hours
Passing Score
70/100 points
Question Types
The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.

Offensive Security OSCP Exam Structure Overview

The Offensive Security OSCP exam is designed to thoroughly assess your knowledge and skills. Here's the complete breakdown of what you'll face:

Total Questions: Practical lab exam Time Allowed: 24 hours Passing Score: 70/100 points Number of Exams: 1

The exam is administered by Offensive Security and can be taken at authorized testing centers or online with live proctoring. The questions are designed to test both theoretical knowledge and practical application of concepts.

Types of Questions You Will See

The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.

Multiple-Choice Questions (MCQ) The majority of questions are traditional multiple-choice with four answer options. Some questions may have multiple correct answers, which will be clearly indicated (e.g., "Select TWO answers").

Question Distribution by Domain

Questions are distributed across all exam domains based on their weight in the exam objectives. Higher-weighted domains have more questions. Review the official exam objectives to understand the percentage breakdown for each domain.

Time Management Strategy

The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.

The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.

The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.

Don't Get Stuck

The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.

Scoring and Passing Requirements

Understanding how Offensive Security OSCP scoring works helps you set realistic goals:

Linear Scoring Your score is based on the percentage of questions answered correctly, weighted by domain importance. Some questions may be unscored "beta" questions being tested for future exams, but you won't know which ones—answer all questions as if they count.

The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.

Score Report

After the exam, you receive a score report showing your performance by domain. If you don't pass, this report helps identify weak areas for focused study before your retake. Even if you pass, reviewing domain scores can guide your professional development.

How to Prepare for Practical lab exam Questions

The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.

1. Master the Exam Objectives Every question is tied to the official exam objectives. Get the current objectives from Offensive Security and use them as your study checklist.

The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.

3. Time Your Practice Exams Take full-length practice exams under timed conditions. This builds stamina and helps you calibrate your pacing for the real exam.

4. Focus on Weak Domains Use practice test results to identify domains where you score below 80%. Concentrate additional study time on these areas.

The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.

Further study tips

Manage your energy throughout the exam—pace yourself to maintain focus through the final questions.

Review official exam objectives and ensure you can explain each topic without notes.

Take a full-length, timed practice exam at least one week before your real exam to identify pacing issues.

Read each question completely before looking at answer choices—key details often appear at the end.

Use process of elimination strategically—removing even one option significantly improves your odds.

Don't change answers unless you have a clear reason. First instincts are often correct.

Mistakes to check

Failing to manage stress and mental fatigue during lengthy exams.

Ignoring the "soft" skills and governance aspects that advanced certs emphasize.

Approaching the exam as a technical test when it often emphasizes management and strategy.

Over-relying on deep technical knowledge without understanding broader organizational context.

Underestimating the length and intensity of advanced certification exams.

Not practicing with realistic scenario-based questions that mirror exam difficulty.

Ready to Practice Offensive Security OSCP Questions?

Test your knowledge with unlimited adaptive Offensive Security OSCP practice questions. Simulate the real exam experience and identify areas for improvement.

Start Free Practice Test

More questions

How many questions should I expect on the OSCP exam?

The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.

Are all OSCP exam questions scored?

Offensive Security may include unscored "beta" or "pilot" questions for future exam development. Since you can't identify which questions are unscored, treat every question as if it counts toward your final OSCP score.

What types of questions are on OSCP?

The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.

How long is the Offensive Security OSCP exam?

The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.

Can I skip questions and come back later on OSCP?

Yes, Offensive Security OSCP allows marking questions for review and returning to them later. Many successful candidates answer confident questions first, then revisit challenging ones.

How many points are required to pass OSCP?

The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.

How many questions can I miss on OSCP?

The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.

Are OSCP questions randomized?

Yes, Offensive Security OSCP draws questions from a large pool and randomizes order. No two exam experiences are identical. This prevents memorization of specific question sequences.

Related resources

Practice and exam preparation

Study resources

Compare and plan ahead