100+ Free HTB CPTS Practice Questions

The HTB CPTS exam is a 10-day (240-hour) practical black-box penetration test conducted via VPN against approximately 8 Linux and Windows machines in a simulated enterprise environment including Active Directory. Candidates receive a letter of engagement defining scope. They must capture at least 12 of 14 flags and submit a commercial-grade penetration test report. Both the flag threshold and an accepted report are required for certification.

Candidates must complete all 28 modules of the HTB Academy Penetration Tester job-role path at 100% before the exam becomes accessible. Each module includes skills assessments that must be completed. The path covers enumeration, web attacks, Active Directory attacks, privilege escalation, pivoting, password attacks, and reporting — approximately 150-300 hours of study.

Complete every module in the HTB Academy Penetration Tester path thoroughly, including all skills assessments. Practice on retired HTB machines that match CPTS difficulty (Easy to Medium). Focus especially on Active Directory attacks (BloodHound, Kerberoasting, Pass-the-Hash), web attacks (SQLi, LFI, command injection), and privilege escalation on both Linux and Windows. Practice report writing alongside your technical skills — the report is separately graded.

Both are practical penetration testing certifications, but they differ in scope and format. OSCP (24 hours) tests exploitation and AD compromise with a specific scoring structure; CPTS (10 days) provides more time and covers a broader range of web attacks, footprinting, and methodology documentation. CPTS costs less (~$490/year vs $1,699+) and is gaining industry recognition, particularly among HTB community members. Many candidates pursue both.

The HTB CPTS report must be a commercial-grade penetration test document including an executive summary, methodology description, detailed findings with risk ratings and remediation recommendations, proof screenshots with flag captures, and supporting evidence for each compromise. HTB provides a sample report structure. The report is reviewed by HTB staff and must demonstrate professional technical writing quality in addition to correct findings.

No — this is a knowledge-prep multiple-choice practice exam. The real HTB CPTS requires actually compromising machines in a live lab environment over 10 days. These practice questions build conceptual knowledge of tools (Nmap, BloodHound, Metasploit), techniques (Kerberoasting, Pass-the-Hash, LFI), and methodology that underpin practical exploitation. Use this alongside hands-on HTB machine practice for complete exam preparation.