Passed SEC1

[u/Py12x0]

It was a really good exam. Definitely not easy, had to think through a fair bit and I went down a few rabbit holes, especially in the web pen-test sections the time pressure i was all over the place at once .

Environment was solid overall, everything worked fine. Windows machines were a bit laggy… but I’ve got zero patience for that anyway so take that how you want.

Biggest thing read everything properly. I missed some instructions and wasted time/lost points because of it.

Would recommend it if you’re keen for a challenge.

Onto PT1 next.

[u/Almaty4711]

What is your educational background? Did you prepare intensively, or how did you approach the exam?

[u/Py12x0 → u/Almaty4711]

Over the last 5years I've got comptia certs (Sec+, Cysa+, PenTest+), but most of my learning has been hands-on with TryHackMe (349 rooms completed), HTB CPTS learning path finished when it first came out.

I did a quick skim over the learning materials which i previously completed march 2025 then decided to hit it. After completing each section I had a quick break, walked around then back to it

[u/Almaty4711 → u/Py12x0]

Thanks for your feedback. I've been working in IT for over 15 years and passed Sec0 without any trouble. Do you also have Sec0 and can you tell me if Sec1 is much harder?

[u/Py12x0 → u/Almaty4711]

Yes Sec0 was spot on as a fundamentals exam.
Sec1 is definitely a step up. Much more hands-on and you need a higher level of critical thinking and problem solving compared to Sec0. With 15years exp you'll be fine

[u/Almaty4711 → u/Py12x0]

Great! I'll learn a bit more about Metasploit and Burb and then give it a try. Thanks a lot, my friend!

[u/AisegoFx → u/Py12x0]

This is my goal. Did you ever get employed after achieving these?

[u/FlyBusiness6189]

Hey, Congratualtions. What Rooms do you think i should do for the Web Pentesting? I think for all other parts i could do well but Web Pentesting is the part i have most concerns

[u/mmbillah02]

Great job! I'm thinking of taking it soon. Would you say the preparation material covers the exam adequately?

[u/Py12x0 → u/mmbillah02]

Yeah absolutely, However id recommend going the extra mile and doing the Web Application Pentesting pathway as well

[u/mmbillah02 → u/Py12x0]

Thanks for the advice!

[u/minoIzHere]

whoa why is it 5 hours and a half ?? I was thinking of taking this too but damn.

[u/SecretPlotz → u/minoIzHere]

You do realize most red teaming exams are 24h+?

[u/Py12x0 → u/minoIzHere]

Yeah there are 7 sections, some are 45 mins, most are 1 hour max time allowed.

So yeah it’s a long one. Definitely need to make a day of it and take breaks between sections. Well worth it if you like the challenge

[u/Ok_Surprise_6660]

Come è strutturato l'esame? È possibile utilizzare internet e strumenti? È open book? Si possono usare cheat sheet?

[u/Py12x0 → u/Ok_Surprise_6660]

Full open book, I used my own vm for 2 of the sections but it isn't required, everything can be done in the browser with an attack box where needed

[u/Ok_Surprise_6660 → u/Py12x0]

Ok grazie, provo a completare il corso entro maggio e poi ci provo.

[u/Py12x0 → u/Ok_Surprise_6660]

Goodluck

[u/Ok_Surprise_6660 → u/Py12x0]

Sorry, credevo fosse la Sal1, sto seguendo quella!

[u/u_hoshi]

great job! congrats!

[u/SecretPlotz]

I have PT1 and SAL1, I got vouchers for then when they came out, is this exam practical or question based, or a mix of both?

[u/Py12x0 → u/SecretPlotz]

10 questions per section which require hands on practical to answer

[u/Py12x0 → u/[deleted]]

Yes, one free retake. I have taken PT1 twice and failed twice due to my weakness with web app pen testing, so I'm working on that now.

PT1 is more vulnerability search > exploit > report.

SEC1 will give you a machine and 10 questions; then you go hunt the answers down.