OSCE3 exam-day guide
OSCE3 · Prepare for the day ahead.
Your checklist
Government-issued photo ID
Bring the original ID whose name matches your registration exactly. OffSec-style lab exams typically verify identity before lab access; confirm the accepted ID types and name-matching rules with the provider before test day.
Registration and scheduling confirmation
Have your booking confirmation, candidate/order number, and any exam-access instructions saved offline (screenshot or PDF) in case your email is unreachable during the session.
Exam platform / proctoring client installed and tested
Install whatever client, VPN, or browser extension the provider requires and run any connection test well before the exam. Confirm the current requirements with the provider, since tooling and versions change.
Reliable wired internet plus a backup connection
Prefer Ethernet over Wi-Fi. Have a phone hotspot or second connection ready as a fallback, and know how to switch over without losing your lab session.
Charged laptop, charger, and spare peripherals
Bring the power adapter, a spare mouse, and any adapter you need. Test that your keyboard layout and mouse work with the exam environment beforehand.
Your own methodology notes and command cheat-sheets
Prepare concise, searchable notes (enumeration checklists, common command syntax, privilege-escalation decision trees). Confirm with the provider whether notes and external references are permitted during the exam; some formats restrict them.
Time-zone-converted start time and a buffer
Write the exam start in your local time and set two alarms. Plan to be at your desk 30-45 minutes early for check-in and setup.
Quiet, private room and a backup location
Use a space with a door, stable power, and no interruptions. Have a second room or location in mind in case of noise, power, or connectivity problems.
Water, food, and a break plan
Long practical exams are endurance events. Prepare easy food and water at your desk and decide in advance when you will take short breaks; confirm the provider's rules on leaving the room.
Confirmed rules on breaks, notes, and outside help
Ask the provider in advance what is allowed regarding breaks, leaving the camera view, using notes, and contacting anyone. Do not assume; policies differ between exams and change over time.
A written time-allocation plan
Sketch how you will divide the exam window across the target set, including time for enumeration, exploitation, note-taking, and a final review of deliverables.
Provider support contact and escalation path
Save the support email or phone number and know the procedure if the lab becomes unreachable. Confirm the current contact method with the provider; do not rely on remembered details.
Plan the day
Confirm all logistics with the provider: start time in your time zone, ID requirements, permitted materials, break policy, and the support contact. Re-read the exam guide and any candidate handbook for the current rules.
Run a full dress rehearsal: connect to the exam platform or a similar lab, verify your VPN/client, test screen sharing or proctoring if required, and confirm your notes are accessible offline.
Do a final pass over your methodology notes rather than learning new tools. Rehearse your enumeration checklist, note-taking template, and reporting format so they are automatic on the day.
Protect sleep. Shift your schedule so you are alert during the exam window, and avoid all-nighters in the final stretch; fatigue costs more than one extra hour of study.
Prepare your desk and kit: charger, spare mouse, water, food, ID, and printed or offline notes if allowed. Charge every device and test the backup connection.
Do a light review only: your own checklists and common pitfalls. Stop studying early, eat properly, and set alarms for the morning.
Eat a proper meal, hydrate, and arrive at your desk 30-45 minutes early. Complete check-in and identity verification, then confirm the lab is reachable before the clock matters.
Read the instructions and scoring criteria carefully. Set up your note-taking structure, confirm connectivity, and write down your time-allocation plan before touching any target.
Work from a written plan: enumerate systematically, record every finding and credential as you go, and avoid rabbit holes by time-boxing each target. Move on when stuck and return later.
Take a short planned break to reset, check the clock against your plan, and re-read your notes for anything you flagged. Confirm you are capturing evidence in the format the exam requires.
Stop new exploitation. Verify that all required deliverables, flags, or reports are submitted in the correct format and location, and confirm submission succeeded before the window closes.
Save your notes and any allowed artifacts for your own review, and note which areas felt weak so you can plan follow-up study while the experience is fresh.
Rules to check
Bring government-issued photo ID matching your registration name exactly. Confirm the accepted ID types and any name-change procedure with the provider before test day.
Follow the provider's rules on permitted materials, tools, and outside assistance. If you are unsure whether something is allowed, ask the provider in advance rather than deciding during the exam.
Do not communicate with other people about the exam content during the session unless the provider explicitly permits it. Treat the exam environment as confidential.
Confirm the break policy with the provider: whether breaks are allowed, whether the clock keeps running, and whether you may leave the camera view. Plan your breaks around those rules.
If the lab or platform fails, document what happened (screenshots, timestamps) and contact provider support immediately using the confirmed channel; do not attempt workarounds that may violate the rules.
Understand how the exam is scored before you start, including what counts as a pass and what deliverables are required. Ask the provider if the scoring criteria are unclear.
Keep your own contemporaneous notes during the exam so you can reconstruct your approach and verify submissions; confirm first whether such notes may be kept afterward.
Do not disclose exam content, flags, or specific target details publicly after the test. Follow the provider's confidentiality terms and ask them if you are unsure what may be shared.