Check us
GPENEvery source behind our GPEN questions
Each of these is a published page from GIAC or from the standards body behind the topic. A question was written from the published objectives, then checked against one of them, and the passage it rests on is quoted beside the answer when you get there.
- 58pages
- pages
- 82of 82 questions cited
- of 82 questions cited
- 12source sites
- source sites
- 6exam domains covered
- exam domains covered
The pages themselves
Ordered by how many questions rest on each. The date is when that page was last re-fetched and read, not when the question was written.
- nistpubs / Legacy / SP / nistspecialpublication800 115nvlpubs.nist.gov14 questions · checked 2026-08-28
- cheatsheets / Authentication Cheat Sheetcheatsheetseries.owasp.org3 questions · checked 2026-08-28
- doc / html / rfc4120datatracker.ietf.org3 questions · checked 2026-08-28
- 800 63 3 / sp800 63bpages.nist.gov3 questions · checked 2026-08-28
- techniques / T1071attack.mitre.org2 questions · checked 2026-08-28
- cheatsheets / Password Storage Cheat Sheetcheatsheetseries.owasp.org2 questions · checked 2026-08-28
- windows server / security / kerberos / kerberos constrained delegation overviewlearn.microsoft.com2 questions · checked 2026-08-28
- cvss / v3.1 / specification documentfirst.org2 questions · checked 2026-08-28
- rfc / rfc792.txtrfc-editor.org2 questions · checked 2026-08-28
- tactics / TA0011attack.mitre.org1 question · checked 2026-08-28
- techniques / T1055attack.mitre.org1 question · checked 2026-08-28
- techniques / T1068attack.mitre.org1 question · checked 2026-08-28
- techniques / T1110attack.mitre.org1 question · checked 2026-08-28
- techniques / T1110 / 004attack.mitre.org1 question · checked 2026-08-28
- techniques / T1134attack.mitre.org1 question · checked 2026-08-28
- techniques / T1207attack.mitre.org1 question · checked 2026-08-28
- techniques / T1548attack.mitre.org1 question · checked 2026-08-28
- techniques / T1558 / 001attack.mitre.org1 question · checked 2026-08-28
- techniques / T1558 / 003attack.mitre.org1 question · checked 2026-08-28
- techniques / T1573attack.mitre.org1 question · checked 2026-08-28
- doc / html / rfc8018datatracker.ietf.org1 question · checked 2026-08-28
- doc / html / rfc9106datatracker.ietf.org1 question · checked 2026-08-28
- docs / using metasploit / basics / how to use a reverse shell in metasploitdocs.metasploit.com1 question · checked 2026-08-28
- metasploit / about post exploitationdocs.rapid7.com1 question · checked 2026-08-28
- metasploit / glossarydocs.rapid7.com1 question · checked 2026-08-28
- metasploit / listenersdocs.rapid7.com1 question · checked 2026-08-28
- metasploit / manage meterpreter and shell sessionsdocs.rapid7.com1 question · checked 2026-08-28
- metasploit / modulesdocs.rapid7.com1 question · checked 2026-08-28
- metasploit / working with payloadsdocs.rapid7.com1 question · checked 2026-08-28
- azure / role based access control / scope overviewlearn.microsoft.com1 question · checked 2026-08-28
- azure / security / fundamentals / pen testinglearn.microsoft.com1 question · checked 2026-08-28
- defender endpoint / exploit protection referencelearn.microsoft.com1 question · checked 2026-08-28
- entra / fundamentals / comparelearn.microsoft.com1 question · checked 2026-08-28
- entra / identity platform / app objects and service principalslearn.microsoft.com1 question · checked 2026-08-28
- entra / identity platform / application consent experiencelearn.microsoft.com1 question · checked 2026-08-28
- entra / identity / conditional access / overviewlearn.microsoft.com1 question · checked 2026-08-28
- entra / identity / hybrid / connect / plan connect user signinlearn.microsoft.com1 question · checked 2026-08-28
- entra / identity / hybrid / connect / whatis phslearn.microsoft.com1 question · checked 2026-08-28
- entra / identity / managed identities azure resources / overviewlearn.microsoft.com1 question · checked 2026-08-28
- entra / identity / monitoring health / concept audit logslearn.microsoft.com1 question · checked 2026-08-28
- entra / identity / monitoring health / concept sign inslearn.microsoft.com1 question · checked 2026-08-28
- previous versions / windows / it pro / windows 10 / security / threat protection / auditing / event 4625learn.microsoft.com1 question · checked 2026-08-28
- previous versions / windows / it pro / windows 10 / security / threat protection / security policy settings / account lockout thresholdlearn.microsoft.com1 question · checked 2026-08-28
- previous versions / windows / it pro / windows 10 / security / threat protection / security policy settings / network security do not store lan manager hash value on next password changelearn.microsoft.com1 question · checked 2026-08-28
- previous versions / windows / it pro / windows 10 / security / threat protection / security policy settings / store passwords using reversible encryptionlearn.microsoft.com1 question · checked 2026-08-28
- security / privileged access workstations / privileged access access modellearn.microsoft.com1 question · checked 2026-08-28
- windows / security / threat protection / auditing / event 4769learn.microsoft.com1 question · checked 2026-08-28
- windows / win32 / ad / service principal nameslearn.microsoft.com1 question · checked 2026-08-28
- windows / win32 / memory / data execution preventionlearn.microsoft.com1 question · checked 2026-08-28
- windows / win32 / secbp / control flow guardlearn.microsoft.com1 question · checked 2026-08-28
- linux / man pages / man3 / crypt.3man7.org1 question · checked 2026-08-28
- linux / man pages / man5 / shadow.5man7.org1 question · checked 2026-08-28
- book / man port scanning basicsnmap.org1 question · checked 2026-08-28
- rfc / rfc1034.txtrfc-editor.org1 question · checked 2026-08-28
- rfc / rfc1035.txtrfc-editor.org1 question · checked 2026-08-28
- rfc / rfc3912.txtrfc-editor.org1 question · checked 2026-08-28
- rfc / rfc6962.txtrfc-editor.org1 question · checked 2026-08-28
- rfc / rfc9293.txtrfc-editor.org1 question · checked 2026-08-28
Practise GPEN for free while you decide
Original questions written from the published objectives, with the concept, the reasoning, and a note on every wrong option. No account needed to start.
Start free GPEN questions