OSED exam-day guide
OSED · Prepare for the day ahead.
Your checklist
Government-issued photo ID
Bring the original, unexpired ID with a signature and photo (e.g., passport or driver's license). The name must match your registration exactly. Confirm with the provider which ID forms are accepted and whether a secondary ID is required.
Exam appointment confirmation
Have your registration confirmation, candidate ID number, and the provider's contact details accessible. If testing remotely, confirm the proctoring vendor's check-in link and any required access code.
Testing environment requirements (remote delivery)
If taking the exam online, verify the provider's current rules on private room, clear desk, webcam, microphone, and permitted software. Run the proctoring system check on the same machine and network you will use. Confirm with the provider whether a wired connection or backup network is recommended.
Permitted reference materials
OSED is an open-book practical exam in many delivery formats. Confirm with the provider the exact list of allowed references (e.g., course notes, official documentation, offline copies) and whether internet access is permitted during the exam. Do not assume; policies can change.
Offline copies of allowed documentation
If internet access is restricted, download and organize allowed references locally before exam day. Verify they open without a network connection and are searchable.
Analysis tooling and environment
Prepare the tools you will use for reverse engineering, debugging, and exploit development in the provided lab or VM. Confirm with the provider which tools are pre-installed, which you may install, and whether you must use a provided environment only.
Lab/VM access verification
Test your access to the exam lab or VPN at least 24 hours before the exam. Confirm credentials, connection instructions, and the support channel for access issues during the exam.
Time management plan
Know the total exam duration, the number of targets or tasks, and the passing score. Write a rough allocation per target and a checkpoint schedule. Confirm with the provider whether breaks are allowed and whether the clock stops during breaks.
Note-taking and reporting method
Decide how you will capture flags, screenshots, commands, and notes. If the exam requires a written report, confirm the required format, file type, and submission method with the provider.
Backup power and connectivity
For remote delivery, have a charged laptop, charger, and a backup internet option (e.g., mobile hotspot). Confirm with the provider what to do if connectivity fails mid-exam.
Support contact
Save the provider's exam support phone number or chat link. Know the escalation path for technical issues, identity verification problems, or lab outages.
Personal logistics
Plan food, water, medication, and restroom breaks around the exam rules. Confirm with the provider whether food and drink are allowed at the testing station and whether unscheduled breaks are permitted.
Plan the day
Re-read the exam objectives and confirm the current format, duration, passing score, and allowed materials with the provider. Run a full timed practice exercise against a lab you have not seen before, focusing on scoping, exploitation, and documentation under time pressure. Verify your tooling and offline references work without internet. Prepare your note-taking template and report skeleton if a report is required. Sleep on a normal schedule; avoid learning new tooling this late.
Confirm your appointment time, time zone, and check-in window. Test your ID, webcam, microphone, and proctoring software if remote. Verify lab/VPN access and reset any expired credentials. Organize allowed references into a single searchable folder. Prepare your workspace: clear desk, charger, water, and backup connectivity. Do a light review of your own notes and common pitfalls; stop heavy study early and get a full night's sleep.
Eat a normal meal and hydrate. Join the check-in early per the provider's instructions. Have your ID and appointment details ready. Close unnecessary applications and disable notifications. Confirm the exam clock, break rules, and how to reach support. Do a final 10-minute review of your checklist and time allocation, then start calmly.
Read the instructions and scoring rules carefully before touching any target. Do a quick scoping pass and prioritize targets by confidence and point value. Work in focused blocks with a written log of commands, findings, and flags. Take allowed breaks before fatigue sets in. If stuck, timebox and move on; return later. Save evidence as you go. Reserve the final portion of the exam for verifying flags, completing any required report, and submitting through the specified method. If a technical issue occurs, contact support immediately and document the incident.
Rules to check
Follow the provider's current candidate agreement and exam policy. Rules on allowed references, internet access, tooling, and communication differ by delivery format; confirm the exact rules with the provider before exam day and do not rely on second-hand accounts.
Present valid government-issued photo ID matching your registration. If your ID name differs from your registration, resolve it with the provider before the exam; do not attempt check-in with mismatched documents.
Do not communicate with other people about the exam content during the exam, and do not share, publish, or discuss live exam targets, flags, or questions. Assume the exam is confidential unless the provider states otherwise.
Use only the tools, references, and environments the provider permits. If you are unsure whether a tool or website is allowed, ask the provider before the exam rather than risking a conduct violation.
Confirm break rules with the provider. In many proctored exams the clock continues during breaks and unscheduled breaks may be restricted; plan your time accordingly and take breaks only as permitted.
Understand the scoring model before you start: passing score, whether partial credit is awarded per target, and whether a written report is required. Allocate time to document and submit evidence in the required format.
If you encounter a technical failure, identity-verification issue, or lab outage, stop and contact the provider's exam support immediately. Record timestamps and details; do not attempt to work around proctoring or access controls.
Do not attempt to use unauthorized assistance, automate the exam, or tamper with the testing environment. Suspected misconduct can lead to score invalidation or certification revocation under the provider's policies.