100% Free OffSec OSCP Practice Test Questions and Answers 2026

Start Learning with the Latest and Real 100% Free OffSec OSCP Exam Questions

Page: 1 / 47

Total 234 Questions | Updated On: May 21, 2026

Add To Cart

Question 1

After getting initial access, you use netstat -ano and spot a suspicious service listening on port 5985. What service is this and how can it help?

A : RDP – Used for screen sharing

B : DNS – Internal name resolution

C : SMB – File sharing

D : WinRM – Can allow remote code execution via PS Remoting

Answer: D

Question 2

You’ve dumped SAM and SYSTEM hives on a Windows host. What can you extract? (Select all that apply)

A : NTLM password hashes

B : User login timestamps

C : SID of local accounts

D : Kerberos tickets

Answer: A,B,C

Question 3

You are performing a Post-Exploitation task on a compromised Linux server. Which of the following would help you maintain access on the system? (Select all that apply)

A : Add a cron job to re-establish reverse shell every 5 minutes

B : Modify /etc/sudoers to allow user root privileges

C : Use chattr to lock the reverse shell file

D : Add your public SSH key to ~/.ssh/authorized_keys

Answer: A,C,D

Question 4

Which of the following is not typically associated with passive information gathering?

A : DNS zone transfer

B : WHOIS lookup

C : Google Dorking

D : LinkedIn OSINT

Answer: A

Question 5

You want to create stealthy persistence on a Domain Controller using minimal file operations. What is a suitable technique?

A : Install a backdoor service

B : Add a new user to administrators

C : Create a skeleton key via mimikatz

D : Create an AlwaysInstallElevated MSI payload

Answer: C

Page: 1 / 47

Total 234 Questions | Updated On: May 21, 2026

Add To Cart