Volume #2. Five more practice tests, 500 questions, built for the last stretch before exam day.

The GIAC Experienced Penetration Tester (GX-PT) exam is an Applied Knowledge certification delivered entirely as CyberLive: 25 hands-on tasks on live virtual machines, four hours, open book. It contains no multiple choice section.

These are written practice tests. They do not simulate the live VM environment and nothing here pretends otherwise. What they train is the decision layer that hands-on work runs on. When you are three hours into a four hour exam and a task drops you onto a host with enumeration output in front of you, the bottleneck is not typing. It is knowing, quickly, which of six reasonable techniques is the right one given the constraints you were handed. That is what these 500 questions rehearse.

How this volume differs from #1

Volume #1 builds coverage across all nine objectives. Volume #2 is built for simulation and for reasoning that spans phases. Expect more questions that hand you a foothold plus enumeration data and ask for the route to Domain Admin. More C2 and evasion scenarios with stated defensive controls. More evidence to read before you commit to an answer. Same nine objectives, same proportional weighting, different emphasis:

• Offensive Operations Reconnaissance

• Network Scanning for Pen Tests

• Network Access Exploitation

• Password Analysis and Cracking

• Lateral Movement and Privilege Escalation

• Penetration Testing of Domain Environments

• Enterprise System Penetration Testing

• Command and Control Communication and Evasion

• Linux Penetration Testing Tools

Every question carries a written rationale

Not a letter and a shrug. Each explanation covers the reasoning behind the correct choice and the trade-off that rules out the tempting alternative, which is usually where the real learning sits. Answer options are randomized per question, so pattern-hunting will not help you.