OFFENSIVE SECURITY OSCP / EXAM REFERENCE Know the exam format.
Prepare with a clear plan.
The OffSec OSCP exam is a 23-hour 45-minute hands-on penetration test with no multiple-choice questions.
Published by PrepForCerts · Editorial responsibility and sources · Updated
How Many Questions Are on the OSCP Exam? Complete 2026 Guide
Current exam and certification facts
The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024. The OSCP credential remains valid for life. The separate OSCP+ designation expires after three years unless you meet current OffSec maintenance and renewal requirements. Loss of the + designation does not remove the lifetime OSCP credential.
Study schedules below are planning examples. Confirm current fees, exam delivery, and eligibility with the provider before booking.
The OSCP exam has zero traditional questions. It is a 23-hour 45-minute hands-on penetration test where you compromise multiple machines and submit proof. After the practical, you have 24 hours to write a professional report. OSCP is the gold standard for penetration testing certifications.
Pay varies by role, location, experience, and skills. Compare current job listings; certification alone does not guarantee a salary.
Exam Format
| Component | Details | Points |
|---|---|---|
| Active Directory Set (3 machines) | Full AD chain: initial access → lateral movement → domain admin | 40 |
| Standalone Machine 1 | Full exploitation + privilege escalation | 20 |
| Standalone Machine 2 | Full exploitation + privilege escalation | 20 |
| Standalone Machine 3 | Full exploitation + privilege escalation | 20 |
| The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024. | Course exercises and lab report | 10 |
The 48-Hour Marathon
Phase 1: Practical (23h 45m)
- Hours 0-2: Enumerate all targets, run scans
- Hours 2-8: Attack standalone machines
- Hours 8-16: Focus on AD chain
- Hours 16-24: Revisit unsolved, collect proof screenshots
Phase 2: Report (24 hours)
Professional report with executive summary, detailed findings, reproduction steps, screenshots, and remediation recommendations.
OSCP vs. Alternatives
| Cert | Format | Duration | Cost |
|---|---|---|---|
| OSCP | Hands-on + report | ~48 hrs | $1,649+ |
| CEH | 125 MC | 4 hrs | $1,199 |
| PenTest+ | 85 MC+PBQ | 165 min | $392 |
| GPEN | 82-115 questions | 3 hrs | $2,499 |
Preparation
- The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.
- Solve as many lab machines as possible
- Supplement with HackTheBox/TryHackMe
- Master Linux and Windows privilege escalation
- Practice AD attack chains repeatedly
- Write reports for every machine solved
Frequently Asked Questions
Questions?
Zero MC. 23h 45m hands-on pentest.
Passing score?
70/100 points plus professional report.
How hard?
One of the hardest cybersecurity certs.
Duration?
~48 hours total (practical + report).
What's tested?
Enumeration, exploitation, privesc, AD, reporting.
Prep time?
3-6 months intensive; 6-12 for beginners.
Cost?
$1,649+ for course + exam.
Metasploit?
Limited — exploit modules on one target only.
Practice Offensive Security Concepts
Build penetration testing knowledge with practice questions.
Start Free Practice Test →Related Resources
Plan your preparation
Planning your study schedule for Offensive Security OSCP? Understanding the exact exam format—including question count and time limits—helps you practice effectively for OSCP success.
The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.
The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.
- Questions
- Practical lab exam
- Time Limit
- 24 hours
- Passing Score
- 70/100 points
- Question Types
- The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.
Offensive Security OSCP Exam Structure Overview
The Offensive Security OSCP exam is designed to thoroughly assess your knowledge and skills. Here's the complete breakdown of what you'll face:
Total Questions: Practical lab exam Time Allowed: 24 hours Passing Score: 70/100 points Number of Exams: 1
The exam is administered by Offensive Security and can be taken at authorized testing centers or online with live proctoring. The questions are designed to test both theoretical knowledge and practical application of concepts.
Types of Questions You Will See
The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.
Multiple-Choice Questions (MCQ) The majority of questions are traditional multiple-choice with four answer options. Some questions may have multiple correct answers, which will be clearly indicated (e.g., "Select TWO answers").
Question Distribution by Domain
Questions are distributed across all exam domains based on their weight in the exam objectives. Higher-weighted domains have more questions. Review the official exam objectives to understand the percentage breakdown for each domain.
Time Management Strategy
The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.
The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.
The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.
Don't Get Stuck
The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.
Scoring and Passing Requirements
Understanding how Offensive Security OSCP scoring works helps you set realistic goals:
Linear Scoring Your score is based on the percentage of questions answered correctly, weighted by domain importance. Some questions may be unscored "beta" questions being tested for future exams, but you won't know which ones—answer all questions as if they count.
The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.
Score Report
After the exam, you receive a score report showing your performance by domain. If you don't pass, this report helps identify weak areas for focused study before your retake. Even if you pass, reviewing domain scores can guide your professional development.
How to Prepare for Practical lab exam Questions
The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.
1. Master the Exam Objectives Every question is tied to the official exam objectives. Get the current objectives from Offensive Security and use them as your study checklist.
The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.
3. Time Your Practice Exams Take full-length practice exams under timed conditions. This builds stamina and helps you calibrate your pacing for the real exam.
4. Focus on Weak Domains Use practice test results to identify domains where you score below 80%. Concentrate additional study time on these areas.
The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.
Further study tips
Manage your energy throughout the exam—pace yourself to maintain focus through the final questions.
Review official exam objectives and ensure you can explain each topic without notes.
Take a full-length, timed practice exam at least one week before your real exam to identify pacing issues.
Read each question completely before looking at answer choices—key details often appear at the end.
Use process of elimination strategically—removing even one option significantly improves your odds.
Don't change answers unless you have a clear reason. First instincts are often correct.
Mistakes to check
Failing to manage stress and mental fatigue during lengthy exams.
Ignoring the "soft" skills and governance aspects that advanced certs emphasize.
Approaching the exam as a technical test when it often emphasizes management and strategy.
Over-relying on deep technical knowledge without understanding broader organizational context.
Underestimating the length and intensity of advanced certification exams.
Not practicing with realistic scenario-based questions that mirror exam difficulty.
Ready to Practice Offensive Security OSCP Questions?
Test your knowledge with unlimited adaptive Offensive Security OSCP practice questions. Simulate the real exam experience and identify areas for improvement.
More questions
How many questions should I expect on the OSCP exam?
The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.
Are all OSCP exam questions scored?
Offensive Security may include unscored "beta" or "pilot" questions for future exam development. Since you can't identify which questions are unscored, treat every question as if it counts toward your final OSCP score.
What types of questions are on OSCP?
The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.
How long is the Offensive Security OSCP exam?
The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.
Can I skip questions and come back later on OSCP?
Yes, Offensive Security OSCP allows marking questions for review and returning to them later. Many successful candidates answer confident questions first, then revisit challenging ones.
How many points are required to pass OSCP?
The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.
How many questions can I miss on OSCP?
The OSCP+ exam is a hands-on penetration test, not a multiple-choice question bank. Allow 23 hours and 45 minutes for the practical and a further 24 hours to submit the report. You need 70 points out of 100 and the required documentation. Bonus points were removed in November 2024.
Are OSCP questions randomized?
Yes, Offensive Security OSCP draws questions from a large pool and randomizes order. No two exam experiences are identical. This prevents memorization of specific question sequences.
Related resources
Practice and exam preparation
- CEH Questions
- Security+ Questions
How many questions
- Free Offensive Security OSCP Practice Test
Test your knowledge with realistic exam questions.
- A+ Exam: Up to 90 per exam Questions (2026)
How many questions
- Network+ Exam: Up to 90 Questions (2026)
How many questions
- CySA+ Exam: Up to 85 Questions (2026)
How many questions
- PenTest+ Exam: Up to 85 Questions (2026)
How many questions
Study resources
- What Is Offensive Security OSCP?
Complete certification overview and career benefits.
- How to Pass Offensive Security OSCP
Study strategies and exam tips.
- CompTIA A+ Exam Objectives Explained (2026 Domain Guide)
Exam objectives
- CompTIA Network+ Exam Objectives & Domains (2026)
Exam objectives
Compare and plan ahead
- Does OSCP Expire?
OSCP renewal requirements and validity period.
Does it expire?