Registered Penetration Tester Pass Rate

Certification bodies publish the passing score, not the percentage of candidates who pass. For the Registered Penetration Tester the published cut score is 60%. What that means: the exam is scaled so that 60% is the line, and your raw number of correct answers is converted to a scaled score against it.

You need 60% (Candidates must achieve at least 60% in both Infrastructure and Web Application to achieve a pass. Passing one of the sections but failing the other one will result in a failure overall.). That leaves 40% of the exam as your margin.

On a 120-question exam at a 60% cut score, roughly 48 answers can be wrong. Treat that as the floor, not the target: aim well above it in mocks, because the real exam weights domains differently to a flat mock.

Scaled. A scaled exam converts your raw correct answers into a score on a common scale, which is why the published cut score is a number like 60 rather than a count of questions. The practical consequence: you cannot reverse-engineer the pass line from a practice test, so practise on the real format and trust the scaled score.

This exam scores 2/10 for difficulty in our bank, so the margin matters. Aim for at least 70% on timed mocks in the same format before you book. There is room for error here, which does not make the exam easy.

Yes. 120 practice questions for this certification, scored per domain against the official domain weights, so you can see whether your weak domain will drag the total under the line.