HTB CDSA exam-day guide
HTB CDSA · Prepare for the day ahead.
Your checklist
Government-issued photo ID
Most proctored practical exams require a valid, unexpired government photo ID whose name matches your registration exactly. Confirm the accepted ID types and name-match rule with the provider before exam day.
Stable internet connection with a backup
Use a wired connection where possible and have a phone hotspot or secondary link ready. Test bandwidth and latency in advance, and confirm with the provider what happens if your connection drops mid-exam.
Working webcam and microphone
Remote proctoring typically requires a webcam for a room scan and identity check plus a microphone. Test both on the exact machine and browser you will use.
Compatible browser and OS
Install the browser version the provider supports and disable pop-up blockers or extensions that could interfere with the proctoring or exam portal. Run any pre-exam system check the provider offers.
Clean, private, well-lit room
Expect a 360-degree room scan and a requirement that no one else enters. Clear your desk of notes, phones, and second screens unless the provider explicitly allows them. Confirm permitted materials with the provider.
Your own attack machine and tooling, pre-installed and snapshotted
A hands-on practical exam expects you to use your own tooling. Install and update your preferred tools beforehand and take a VM snapshot so you can roll back after a broken configuration. Confirm the provider's stance on external tooling and internet access during the exam.
VPN client and connection details
Practical labs are usually reached over a VPN. Have the client installed, credentials saved, and a tested connection path. Verify the allowed VPN protocol and any restrictions with the provider.
Note-taking and evidence workflow ready
Prepare a template for capturing commands, outputs, timestamps, and screenshots. Reports are typically graded on reproducible evidence, so practice saving proof as you go rather than reconstructing it later.
Time-zone conversion of your start time
Convert your scheduled slot to your local time and set two alarms. Confirm the check-in window and late-arrival policy with the provider, since these vary.
Provider support contact and exam handbook open
Keep the provider's support channel and rules page accessible in case of a technical failure or a rules question. Do not rely on memory for policy details.
Water, snacks, and medication within reach
Long practical sessions are mentally taxing. Keep permitted items on the desk and confirm with the provider whether leaving the camera view for breaks is allowed.
Backup power plan
Charge your laptop and have a charger plugged in. If power reliability is a concern, confirm with the provider how an outage would be handled before you start.
Plan the day
Re-read the exam objectives and the provider's handbook end to end. List every objective you cannot demonstrate from memory, then spend the remaining time on those gaps rather than on comfortable material. Verify your exam slot, time zone, and check-in instructions.
Run a full dress rehearsal on the machine you will use: boot the VM, connect the VPN to a practice target if one is available, launch your note template, and capture a sample screenshot. Fix anything that feels slow or fragile now, not on exam day.
Do one timed mini-engagement against a lab you have not seen before. Practice the loop you will use under pressure: enumerate, record, exploit, capture evidence, move on. Review where you lost time.
Confirm permitted materials, tooling rules, and whether internet access is allowed during the exam with the provider. Write the answers into your notes so you are not guessing mid-exam.
Stop learning new tools. Do a light review of your own notes, cheat sheets, and report template only. Update your tooling one final time and re-snapshot the VM so you have a known-good rollback point.
Prepare the room and desk, test the webcam, microphone, and connection again, and charge all devices. Confirm your ID is valid and its name matches your registration. Set alarms and get a full night of sleep.
Eat a proper meal, hydrate, and avoid starting anything new. Do a final five-minute check: VPN connects, VM boots, notes template opens, webcam and mic work, and the provider portal loads.
Join early enough to complete identity verification and the room scan without eating into exam time. Follow the proctor's instructions exactly; if a check fails, stay calm and use the provider's support channel.
Read every task and flag the ones you can complete quickly. Build a short plan with rough time budgets per task and start with high-confidence wins to bank points and settle your nerves.
Work in focused blocks. Capture evidence immediately after each successful step, including the command, the output, and a timestamp. If you are stuck beyond your budget, note what you tried and move on; return later with fresh eyes.
Stop exploiting and consolidate. Verify every required deliverable exists, is in the expected format, and contains reproducible evidence. Check that files are saved where the provider expects and submit before the deadline.
Confirm you received a submission receipt or confirmation screen and save it. Report any technical issues to the provider promptly, following their stated process.
Rules to check
Follow the provider's rules on permitted materials, tooling, and internet access. If the handbook is ambiguous, ask before the exam rather than assuming; confirm with the provider.
Keep your government photo ID visible and be ready to re-verify identity if the proctor asks. Your registered name must match your ID; confirm the exact match requirement with the provider.
Stay within the camera view and the scanned room for the duration unless the proctor authorizes otherwise. Do not let anyone else enter the room or assist you.
Do not communicate with anyone other than the proctor during the exam, and do not share, record, or publish exam content, targets, or flags. Treat all exam material as confidential.
Breaks, if any, are governed by provider policy. Ask the proctor before leaving the desk and confirm whether the clock keeps running; do not assume.
Scoring is typically based on the submitted evidence rather than on having touched every target. Write reproducible steps and clear screenshots; confirm the exact scoring and partial-credit model with the provider.
If your connection or platform fails, notify the proctor and the provider's support channel immediately and follow their instructions. Do not attempt to restart or reconfigure the proctoring setup on your own without guidance.
Do not use unauthorized automation, shared accounts, or another person's work. Any suspected misconduct can void your result; when in doubt about whether an action is allowed, ask first.