thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

EC-Council · Cybersecurity · Expert

EC-Council Licensed Penetration Tester (LPT Master) exam guide

Exam LPT (Master), via the CPENT exam

Licensed Penetration Tester (LPT Master) is EC-Council's top penetration testing credential. It has no separate exam: you earn it by scoring at least 90% on the CPENT practical exam and having your report approved, showing you can pivot through hardened, multi-layered networks under time pressure.

QuestionsSee official page
Time limit1440 minutes
Passing score90% or higher on CPENT
Exam feeSee official page
Valid for1 years
DeliveryOnline, remotely proctored

Format: 24-hour live-proctored practical range exam (shared with CPENT) plus report approval. Fee note: No separate LPT exam fee; cost is the CPENT bundle. Annual fee $250 to keep LPT active.

Who it's for

Experienced penetration testers aiming for the highest EC-Council offensive credential.

What the exam covers

Multi-level pivoting and tunnelling—
Exploiting hardened hosts and web applications—
Privilege escalation—
Data exfiltration—
Professional reporting—

A dash means the vendor does not publish a weight for that domain.

Eligibility & prerequisites

Required: Eligibility for the CPENT exam.

Recommended: Several years of professional pen testing with strong pivoting and AD skills.

Keeping it active

Valid one year from approval and renewed annually ($250 annual continuing education fee), subject to EC-Council's ECE policy.

Skills & careers

Skills it validates

  • Advanced multi-network pivoting
  • SSH tunnelling and port redirection
  • Exploiting hardened Windows and Linux hosts
  • SQL injection and web exploitation
  • Privilege escalation
  • Clear, executive-ready reporting

Job roles

Senior Penetration TesterRed Team LeadOffensive Security ManagerPrincipal Security ConsultantAdversary Emulation Specialist

Where it fits in your path

Planning a degree too? See how this cert earns college credit in the College Credit Navigator.

Build my study plan

  1. Month 1-2: Prepare as for CPENT, with extra time on pivoting chains across three or more subnets.
  2. Month 3: Run full timed practice ranges and aim for near-complete objective coverage.
  3. Month 3: Draft a report template in advance so writing does not cost points.
  4. Exam: Pace for 90%+ rather than the 70% CPENT pass.

Make it yours: pick your exam date and weekly hours. We'll split your time by domain weight and give you a printable plan.

Exam-day tips

  • You need near-complete coverage, so time-box each target and return later.
  • Script repetitive steps such as tunnel setup to save hours.
  • Keep evidence for every flag; the review committee checks the report.
  • Plan sleep if taking the single 24-hour option; many choose 2x12 instead.

Key terms for this exam

All 16 terms Study with thinQcards™

Frequently asked questions

Is there a separate LPT exam?

No. LPT (Master) is awarded for scoring 90%+ on CPENT.

How often does LPT renew?

Annually, with a $250 fee, under EC-Council's ECE policy.

What if I score 75% on CPENT?

You earn CPENT but not LPT (Master).

Is LPT worth it?

It is a strong signal in EC-Council-aligned organisations and some government markets; OffSec certs are more common in general pen testing job ads.

LPT vs OSEP?

OSEP focuses on evasion and AD attack chains; LPT on breadth and pivoting. Both are advanced.

Official page: cert.eccouncil.org. Reviewed November 2026. Vendors change fees and objectives, so confirm with the vendor before you book. Spot something out of date? Tell us.