How many questions on OSCP?

Zero. It's a 23-hour 45-minute hands-on penetration test.

70 out of 100 points across multiple target machines plus a professional report.

One of the most challenging cybersecurity certs. Requires real exploitation skills.

23h 45m practical + 24 hours for report. ~48 hours total.

Enumeration, exploitation, privilege escalation, AD attacks, report writing.

3-6 months intensive. 6-12 months for beginners.

$1,649+ for PEN-200 course + exam.

Limited. msfvenom/multi handler allowed, exploit modules only on one target.

How Many Questions Are on the OSCP Exam? Complete 2026 Guide

The OSCP exam has zero traditional questions. It is a 23-hour 45-minute hands-on penetration test where you compromise multiple machines and submit proof. After the practical, you have 24 hours to write a professional report. OSCP is the gold standard for penetration testing certifications.

OSCP holders command $95,000-$140,000 in pentest roles, with senior positions exceeding $160,000.

MC Questions

23h 45m

Practical Exam

70/100

Passing Score

$1,649+

Course + Exam

Exam Format

Component	Details	Points
Active Directory Set (3 machines)	Full AD chain: initial access → lateral movement → domain admin	40
Standalone Machine 1	Full exploitation + privilege escalation	20
Standalone Machine 2	Full exploitation + privilege escalation	20
Standalone Machine 3	Full exploitation + privilege escalation	20
Bonus Points	Course exercises and lab report	10

Strategy: AD set (40) + 2 standalones (40) = 80 points. Focus on AD chain first — highest value and most in-demand skill.

The 48-Hour Marathon

Phase 1: Practical (23h 45m)

Hours 0-2: Enumerate all targets, run scans
Hours 2-8: Attack standalone machines
Hours 8-16: Focus on AD chain
Hours 16-24: Revisit unsolved, collect proof screenshots

Phase 2: Report (24 hours)

Professional report with executive summary, detailed findings, reproduction steps, screenshots, and remediation recommendations.

OSCP vs. Alternatives

Cert	Format	Duration	Cost
OSCP	Hands-on + report	~48 hrs	$1,649+
CEH	125 MC	4 hrs	$1,199
PenTest+	85 MC+PBQ	165 min	$392
GPEN	82-115 questions	3 hrs	$2,499

Preparation

Complete PEN-200 course exercises for bonus points
Solve as many lab machines as possible
Supplement with HackTheBox/TryHackMe
Master Linux and Windows privilege escalation
Practice AD attack chains repeatedly
Write reports for every machine solved

Frequently Asked Questions

Questions?

Zero MC. 23h 45m hands-on pentest.

Passing score?

70/100 points plus professional report.

How hard?

One of the hardest cybersecurity certs.

Duration?

~48 hours total (practical + report).

What's tested?

Enumeration, exploitation, privesc, AD, reporting.

Prep time?

3-6 months intensive; 6-12 for beginners.

Cost?

$1,649+ for course + exam.

Metasploit?

Limited — exploit modules on one target only.

Practice Offensive Security Concepts

Build penetration testing knowledge with practice questions.

Start Free Practice Test →