Read what Hanan Shakeel said here: https://hananshakeel.com/2019/04/08/10-things-about-lpt-that-blew-my-mind/
I recently attempted the Licensed Penetration Tester (Master), which is an online, remotely proctored and practical exam which challenges the candidate through a grueling 18 hours of performance. The L|PT (Master) requires the candidates to demonstrate a repeatable, methodical and measurable approach towards a successful penetration testing. The program is developed on the recommendations made by subject-matter experts, and practitioners across the world after performing an intensive research on job-task analysis.
What Is the L|PT (Master)?
1. L|PT (Master) Is a Credentialing Exam
L|PT (Master) is often misunderstood as another cyber security training program from EC-Council. This is not a program, rather this is a credential which can be obtained by attempting to the certification exam. L|PT (Master) is 100% online and remotely proctored certification exam which challenges you with an exhausting 18-hour performance.
This hands-on exam is categorized into three segments of 6-hours each that tests your perseverance, penetration testing ability and methodological approach towards it. During these three levels of six hours each you will encounter 9 of the most difficult real-time cybersecurity challenges.
2. L|PT (Master) Is Designed by the Experts
The exam is designed by the subject-matter experts and the industry practitioners. It is based on real life experiences and demand students to bring real world penetration testing capabilities to achieve consistent results. As you progress with the levels, the practical environment also progresses by making the real enterprise network architecture more challenging. This architecture network is not flat rather each higher level present you with the top defensive techniques and that is you are exposed to the latest and toughest methodologies.
3. L|PT (Master) Is Backed by APT
L|PT is not easy! We agree, but the million-dollar question is how to prepare for the exam so that one can outperform and achieve the credential? To prepare yourself to challenge the most-robust pentesting exam on the planet, you need a learning strategy that covers the hands-on experience on the best and recent pentesting performances. EC-Council’s Advanced Penetration Testing is a program that coaches you on the cohesive penetration skills and builds the abilities of a great penetration tester who can successfully get through the challenges. The APT program prepares you with the calibre to focus on your goal even in the time-constraint environment.
4. It Has Live Remote Proctoring
EC-Council’s L|PT (Master) is the world’s first remotely proctored and online penetration testing exam. This is mainly to meet the industry’s requirement to verify the identity of the student appearing for the exam in a controlled environment and to protect the holiness of the credential. The closed environment ensures a strict monitoring so that the student shall compliance to the exam requirements. The proctored exam does not restrict the students to take advantage of the documented resources or research material. Alternatively, it does not allow the candidate to leverage the online feature as being in the proctored environment the sanctity of the exam cannot be compromised.
5. It Encompasses Industry Standard Methodologies
The L|PT (Master) reflects a real-life enterprise network with firewalls, various operating systems, multiple network segments, Demilitarized Zones, access control policies, different web technologies, and more. All these skills are put to test along with the open-source penetration testing methodologies that include NIST800-115, PTES, PCI DSS, OSSTMM and many others. Though some of these methodologies are vertical specific there are many others that cover broader practices. The L|PT (Master) challenges you to gain insight of deeper penetration testing aspects.
6. Report Writing Is Mandatory
It is the penetration testing report that is saleable and if it is not able to convince the management, then the penetration tester skills go unrecognized. As L|PT (Master) is aimed to verify every skill of becoming a great penetration tester, it also expects you to deliver strong report writing skills. Report writing is an important requirement to assess candidate’s ability in qualifying as L|PT (Master) as many penetration testers are not competent to prepare valuable reports though they have all other required skills. The significance of a good report plays a major role in proposing remediation to the management. The report submitted in the exam will be reviewed by the subject matter experts from the penetration testing domain.
7. ECCAPT Is the Base for L|PT (Master)
EC-Council’s Advanced Penetration Testing Cyber Range (ECCAPT) is the ‘Real Steel’. ECCAPT is designed by experts having more than 25 years of penetration testing experience to form a backbone of the Advanced Penetration Testing (APT) course.
ECCAPT is the replica of an enterprise network with accurate representation that present latest challenges to the penetration testers. It is dynamic to changes. As the technology changes, ECCAPT also changes and upgrades machinery. The targets are progressive with every level, once you complete one machine, the next will not disappoint you. The robust ranges are designed to teach professional skills of penetration testing. You need to identify the target attack surface within pre-defined time frame. On accomplishment of this objective, you should gain access to the machines and escalate privileges as required. The greater targets you encounter, with or without defenses, the more you improve on your penetration skills.
8. Eligibility Criteria for L|PT (Master)
To take the LPT master exam the candidate must have prior knowledge of penetration testing. EC-Council recommends to take ECSA or similar certifications such as OSCP before attempting the LPT exam. Upon completion of ECSA/OSCP the candidate is eligible for the exam.
9. Validity of L|PT (Master) Credential
After attaining the Licensed Penetration Tester (Master) credential, you will be given your certification, along with other benefits. This credential will be valid for two years initially and thereafter you can retain the credential through an annual renewal.
10. Recognition Beyond Compare
“Why L|PT when I am already a qualified Penetration Tester?” This is obvious. Being a penetration tester, you can apply for jobs and get through the interview process based on your potentiality. The real significance of L|PT can be understood when the employers prioritize licensed penetration testers over other penetration testers. The credential ensures the employer of your level of competency and that is what makes you superior to other penetration testers.
I strongly recommend LPT for anyone who’s willing to test their mettle in the advanced penetration testing space.