Altered Security Certified Red Team Professional (CRTP) Practice Test
Prepare for the Altered Security Certified Red Team Professional exam with free practice tests focused on Active Directory enumeration, trust abuse, Kerberos attacks, privilege escalation, defense bypass, and reporting. Because the real CRTP is hands-on and not multiple-choice, each 20-question set uses a practical-study timer based on the 24-hour exam window mapped across the official objective areas.
Mixed Set — CRTP Practice Tests
Use these mixed CRTP practice tests to review the full Active Directory attack workflow from initial enumeration through privilege escalation, trust abuse, defense bypass, persistence concepts, and final reporting.
Domain Wise — CRTP Mock Tests
Target individual CRTP skill areas with focused 20-question mock tests. These are knowledge checks for the concepts you later apply in hands-on labs, not a replacement for practical AD exploitation practice.
About the CRTP Certification Exam
Everything you need to know about the Altered Security Certified Red Team Professional exam, including format, pricing, eligibility, practical scope, and career relevance.
What Is CRTP?
The Certified Red Team Professional (CRTP) is Altered Security’s beginner-friendly, hands-on Active Directory red-team certification. It validates the ability to understand, enumerate, attack, and report on enterprise Active Directory environments using practical abuse of Windows and AD features rather than relying on patchable exploits.
CRTP is designed for penetration testers, red teamers, SOC professionals moving into offensive security, Active Directory administrators, security consultants, and students who want a structured introduction to real-world AD attack paths. Relevant job roles include penetration tester, junior red team operator, Active Directory security analyst, security consultant, and internal security assessor.
For career context, the U.S. Bureau of Labor Statistics reports a May 2024 median annual wage of $124,910 for information security analysts and projects 29% employment growth from 2024 to 2034. CRTP is especially useful for professionals who want to demonstrate hands-on AD security skills in environments where identity compromise, privilege escalation, and lateral movement are major risks.
Exam Format (2026)
Testing method: Remote, hands-on practical exam in an individual Windows Active Directory environment.
Questions: No official MCQ count. The exam is task-based and requires solving practical objectives.
Duration: 24 hours for the hands-on certification exam.
Question types: Active Directory enumeration, attack-path construction, privilege escalation, command execution objectives, and written solution reporting.
Passing score: No public scaled score. Candidates must meet the practical objective requirements and submit detailed solutions with mitigations.
Exam fee: On-demand options start at $249 for 30 days of lab access, lifetime course material, and one exam attempt. 60-day and 90-day options are listed at $379 and $499, with exam reattempts at $99.
Eligibility Requirements
Formal prerequisites: No degree, vendor certification, or job-title prerequisite is listed.
Recommended knowledge: Basic understanding of Active Directory and the ability to use command-line tools on Windows.
Technical readiness: Candidates should be comfortable with Windows domains, PowerShell concepts, authentication basics, Kerberos, groups, sessions, ACLs, and reading technical attack-path output.
Exam access: One certification exam attempt is included with the purchased lab package. Additional attempts are available for a separate reattempt fee.
Renewal: The CRTP certificate expires after 3 years. Renewal is free before expiry, and CRTP can also be renewed by completing approved higher-level Altered Security certifications.
CRTP Practice Focus Weights — 2026 Study Blueprint
Altered Security does not publish MCQ-style exam domain percentages for CRTP. The weights below are a practical study distribution mapped to the official CRTP learning objectives and the six domain-wise mock tests on this page.
| Area | Topic | Weight |
|---|---|---|
| D1 | Active Directory Fundamentals and Enumeration | 25% Practice Focus |
| D2 | Trust Mapping | 14% Practice Focus |
| D3 | Kerberos-Based Attacks | 18% Practice Focus |
| D4 | Privilege Escalation and Lateral Movement | 22% Practice Focus |
| D5 | Defense Bypass | 14% Practice Focus |
| D6 | Reporting | 7% Practice Focus |
How Our Practice Tests Are Designed
Hands-on concept alignment — CRTP is a practical exam, so these tests focus on the concepts you need before and during lab work: enumeration logic, attack-path selection, Kerberos abuse, trust relationships, privilege escalation, defense bypass awareness, and mitigation writing.
Blueprint-aware mixed sets — Mixed practice tests combine all six focus areas so you can train the same end-to-end reasoning used in an Active Directory assessment: discover what exists, identify paths, escalate carefully, move laterally, avoid common detection mistakes, and document impact.
Practical-study timer — The real CRTP exam is 24 hours and has no official multiple-choice question count. For a study-friendly timer, each 20-question set is timed at about 111 minutes by mapping the 24-hour exam window across the official learning-objective groups. Treat this as a pacing tool, not a claim that the real exam has MCQs.
Domain-specific reinforcement — Use domain-wise tests after mixed sets to strengthen weak areas. For example, if Kerberos or trust abuse questions slow you down, complete those focused tests before returning to a full mixed set.
CRTP Exam Preparation Tips
Study Strategy
Build AD fundamentals first: Before advanced attacks, understand users, groups, ACLs, GPOs, SPNs, sessions, delegation, trusts, and how normal domain users can enumerate useful information.
Practice attack-path thinking: CRTP is not about memorizing one exploit. Train yourself to connect evidence from enumeration into a logical chain that leads from a low-privileged starting point to higher privileges.
Write notes as you practice: Keep a repeatable checklist for commands, findings, screenshots, impact, and mitigations. Strong documentation makes the final reporting phase much easier.
Test-Taking Strategy
Enumerate before attacking: Do not rush into techniques without understanding the domain layout, groups, rights, sessions, trusts, and reachable systems.
Track every credential and path: Document where each credential came from, what privileges it has, and which machines or services it can access. This prevents wasted time and supports your report.
Explain mitigations clearly: The exam expects detailed solutions with practical mitigations. For every successful path, capture why it worked and how an organization could reduce or detect that risk.
Frequently Asked Questions
Ready to Test Your CRTP Knowledge?
Start with a mixed set to check your Active Directory red-team readiness, then use domain-wise practice tests to strengthen enumeration, Kerberos, trusts, privilege escalation, defense bypass, and reporting.
Start CRTP Practice Test 1 →
