Question 1

What is the HTB CPTS exam format?

Accepted Answer

The HTB CPTS exam is a 10-day (240-hour) practical black-box penetration test conducted via VPN against approximately 8 Linux and Windows machines in a simulated enterprise environment including Active Directory. Candidates receive a letter of engagement defining scope. They must capture at least 12 of 14 flags and submit a commercial-grade penetration test report. Both the flag threshold and an accepted report are required for certification.

Question 2

What are the prerequisites for the HTB CPTS?

Accepted Answer

Candidates must complete all 28 modules of the HTB Academy Penetration Tester job-role path at 100% before the exam becomes accessible. Each module includes skills assessments that must be completed. The path covers enumeration, web attacks, Active Directory attacks, privilege escalation, pivoting, password attacks, and reporting — approximately 150-300 hours of study.

Question 3

How should I prepare for the HTB CPTS?

Accepted Answer

Complete every module in the HTB Academy Penetration Tester path thoroughly, including all skills assessments. Practice on retired HTB machines that match CPTS difficulty (Easy to Medium). Focus especially on Active Directory attacks (BloodHound, Kerberoasting, Pass-the-Hash), web attacks (SQLi, LFI, command injection), and privilege escalation on both Linux and Windows. Practice report writing alongside your technical skills — the report is separately graded.

Question 4

How does the HTB CPTS compare to the OSCP?

Accepted Answer

Both are practical penetration testing certifications, but they differ in scope and format. OSCP (24 hours) tests exploitation and AD compromise with a specific scoring structure; CPTS (10 days) provides more time and covers a broader range of web attacks, footprinting, and methodology documentation. CPTS costs less (~$490/year vs $1,699+) and is gaining industry recognition, particularly among HTB community members. Many candidates pursue both.

Question 5

What does the CPTS professional report require?

Accepted Answer

The HTB CPTS report must be a commercial-grade penetration test document including an executive summary, methodology description, detailed findings with risk ratings and remediation recommendations, proof screenshots with flag captures, and supporting evidence for each compromise. HTB provides a sample report structure. The report is reviewed by HTB staff and must demonstrate professional technical writing quality in addition to correct findings.

Question 6

Is this practice exam like the real HTB CPTS?

Accepted Answer

No — this is a knowledge-prep multiple-choice practice exam. The real HTB CPTS requires actually compromising machines in a live lab environment over 10 days. These practice questions build conceptual knowledge of tools (Nmap, BloodHound, Metasploit), techniques (Kerberoasting, Pass-the-Hash, LFI), and methodology that underpin practical exploitation. Use this alongside hands-on HTB machine practice for complete exam preparation.

100+ Free HTB CPTS Practice Questions

HTB Certified Penetration Testing Specialist (CPTS)

Explore More Hack The Box Certifications

HTB Certified Active Directory Pentesting Expert (CAPE)

HTB Certified Defensive Security Analyst (CDSA)

HTB Certified Junior Cybersecurity Associate (CJCA)

HTB Certified Web Exploitation Expert (CWEE)

HTB Certified Web Exploitation Specialist (CWES)

HTB Certified Wi-Fi Pentesting Expert (CWPE)

Key Facts: HTB CPTS Exam

Sample HTB CPTS Practice Questions

About the HTB CPTS Practice Questions