Certified Penetration Testing Professional

Halfway through CPPT prep. The network scanning and enumeration sections are more nuanced than I expected - definitely not surface-level questions.

Passed first try after grinding the exploitation and privesc domains.

I had a few years of blue team experience but had never formally studied offensive techniques. The ML0-320 question bank covers reconnaissance through exploitation in a progression that made the whole methodology click. Passed on my second attempt and moved into a pentesting role shortly after.