OSCP Readiness Test

10 questions, balanced across the exam's topics. Answer each one, then submit for your practice readiness estimate and per-topic breakdown. This is a practice estimate — not a prediction or guarantee of your official exam result.

Question 1

What does a domain trust primarily enable?

Sharing every local account password in plaintext Authentication relationships across domain boundaries, subject to authorization controls Merging all domains into one subnet Automatic full administrative access to every trusted-domain computer

Question 2

Why does trust direction matter?

It determines which domain contains all resource ACLs It determines whether the trust is automatically transitive It determines whether the two domains use the same DNS suffix It determines which domain's identities may be accepted by the other side

Question 3

A user can modify a computer's RBCD-related attribute but controls no suitable service principal. What remains to establish?

A complete delegation chain with a usable controlled principal and valid protocol conditions That attribute write alone is identical to a SYSTEM shell That the target's firewall is irrelevant That every ordinary user is already a service principal with known keys

Question 4

Why can duplicate SPN registration disrupt Kerberos?

Duplicates automatically grant all users service ownership The KDC may be unable to resolve a unique service-account mapping Every duplicate SPN contains a password The service's TCP port is deleted

Question 5

What is the PowerShell remoting second-hop problem?

Credentials used to reach Server B are not automatically usable from B to Server C Every second-hop failure means the original password was incorrect The first remoting session cannot establish a TCP connection The remote command's output must pass through two serializers

Question 6

What is a key limitation of assuming all CIM commands use DCOM?

Every CIM request is an LDAP bind CIM cannot query remote computers CIM always requires a graphical RDP desktop Some CIM sessions use WSMan instead

Question 7

Which DNS query type helps locate domain controllers for LDAP?

SRV queries for relevant domain service records PTR queries for every process ID CAA queries for certificate issuers MX queries for the user's mailbox

Question 8

A copied domain database is available without the necessary system key material. What should be avoided?

Treating the database as sensitive Claiming complete secret recovery before successful analysis Recording the file's origin and hash Checking whether the copy is consistent

Question 9

What is a golden ticket conceptually?

A forged service ticket based only on one service account's key A local Windows administrator's access token A normal password-reset email A forged TGT based on compromised krbtgt key material

Question 10

Why is objectSid useful when names change?

It encodes all current group members It identifies the security principal independently of its display name It replaces every access-control entry with text It automatically updates every password

Unanswered questions count as incorrect. Your answers are graded on the server; no answer key is sent to your browser.

← Back to the OSCP page

About Contact Privacy Policy Terms of Service Refund Policy

Home Exams Simulations WorkTrials GameScope Account