Study guide

1.2 How to Use This Guide & Study Strategy

Kali Linux Certified Professional KLCP

Track your progress as you read

Finished sections get a check mark.

1 Introduction & Exam Overview

1.1 Current Exam Facts 1.2 How to Use This Guide & Study Strategy 1.3 PEN-103 Syllabus & Study Path

2 About Kali Linux

2.1 A Bit of History: From BackTrack to Kali 2.2 Kali's Relationship with Debian 2.3 Purpose and Use Cases 2.4 Main Features and Design Policies

3 Getting Started with Kali Linux

3.1 Downloading and Verifying a Kali ISO 3.2 Booting Kali in Live Mode 3.3 Installation Options Overview 3.4 Troubleshooting Installations

4 Linux Fundamentals

4.1 What Linux Is and What It Does 4.2 The Command Line 4.3 The Filesystem Hierarchy Standard 4.4 Useful Commands: Files, Search, Environment

5 Permissions and Process Management

5.1 File Permissions and Ownership 5.2 Managing Processes 5.3 Shells, Variables, and the Environment

6 Installing Kali Linux

6.1 Minimal Installation Requirements 6.2 Step-by-Step Installation on a Hard Drive 6.3 Unattended Installations with Preseeding 6.4 ARM Installations

7 Configuring the Network, Users, and SSH

7.1 Configuring the Network 7.2 Managing Unix Users and Groups 7.3 Configuring SSH

8 Configuring Services

8.1 Apache Web Server 8.2 PostgreSQL Database 8.3 Managing Services with systemd

9 Helping Yourself and Getting Help

9.1 Documentation Sources 9.2 Kali Linux Communities 9.3 Filing Good Bug Reports

10 Security Policy and Network Services

10.1 Defining a Security Policy 10.2 Possible Security Measures 10.3 Securing Network Services

11 Firewalling and Monitoring

11.1 Netfilter and iptables Behavior 11.2 Writing iptables Rules and NAT 11.3 Monitoring and Logging

12 Debian Package Management: APT

12.1 Introduction to APT 12.2 The sources.list File 12.3 Kali Repositories 12.4 Basic Package Interaction with apt

13 dpkg and Advanced Package Management

13.1 dpkg Fundamentals 13.2 Inspecting .deb Files and Package State 13.3 Maintainer Scripts and Conffiles 13.4 APT Pinning and Package Authenticity

14 Advanced Usage

14.1 Modifying and Rebuilding Kali Packages 14.2 Recompiling the Kernel 14.3 Building Custom Kali Live ISO Images 14.4 USB Persistence with LUKS Encryption

15 Kali Linux in the Enterprise

15.1 Network Installation with PXE Boot 15.2 Configuration Management with SaltStack 15.3 Metapackages and Custom Repositories 15.4 Configuration Packages and Forking

16 Introduction to Security Assessments

16.1 Kali Linux in an Assessment 16.2 Types of Assessments 16.3 Types of Attacks 16.4 Formalization and the Road Ahead

1.2 How to Use This Guide & Study Strategy

Key Takeaways Explain This Topic AI

This guide mirrors the 12 chapters of the Kali Linux Revealed book, expanded into 16 guide chapters so heavy topics like package management get dedicated coverage.

A realistic plan is 4–8 weeks at 5–10 hours per week, totaling roughly 40–80 hours of study.

Use the read-quiz-review loop: read the book chapter, read the guide chapter, quiz yourself closed-book, then review every miss in the source material.

Early 'soft' chapters — Kali's history, getting started, and help resources such as man pages — are frequently tested and are the chapters candidates most often skip.

Because the exam is closed-book recall, self-testing without references is the single highest-value study activity.

Last updated: July 2026

How This Guide Is Organized

This study guide tracks the official PEN-103 source material — the Kali Linux Revealed book — chapter for chapter. The book has 12 chapters , and the exam covers all of them, so the guide covers all of them too. Where one book chapter packs in more material than a single study session can hold, the guide splits it: package management, for example, earns two guide chapters because it carries the heaviest exam weight, and customization topics such as building a live ISO get their own treatment. That is why the guide has 16 chapters for 12 book chapters. Section 1.3 shows the full mapping.

Each guide chapter follows the same internal pattern so you always know what to do next:

Numbered sections with teaching text that condenses and re-explains the book material, adding comparison tables, worked commands, and exam-trap callouts.

Key takeaways per section — short, quotable facts suitable for flashcards.

Quiz blocks written in the exam's multiple-choice style, with explanations that teach why the right answer is right and why the distractors are wrong.

The Read-Quiz-Review Loop

The study method this guide is built around is a repeating loop, applied one book chapter at a time:

Read the corresponding chapter of the Kali Linux Revealed book in the free PEN-103 course on portal.offsec.com. The book is the authoritative source; this guide is a companion, not a replacement.

Read the matching guide chapter here to see the same material reorganized around what the exam actually asks.

Quiz yourself on the guide chapter's quiz blocks without looking anything up . This simulates the closed-book exam and forces retrieval, which is how facts move from recognition into recall.

Review every miss. Do not just read the explanation — go back to the exact passage in the book that covers the point, because the exam questions are written from the book.

Practice hands-on where the chapter has commands. Spin up a Kali virtual machine and actually run apt update, dpkg -l, systemctl status ssh, and the rest. Muscle memory is recall insurance.

Why the loop works: KLCP is a recall exam, and decades of learning research agree that retrieval practice — forcing yourself to produce an answer — builds durable memory far better than rereading. Rereading a chapter for the third time feels productive and mostly is not; taking a quiz and missing a question tells you exactly what you do not know yet.

The 4–8 Week, 40–80 Hour Plan

Most candidates need between 40 and 80 total hours to prepare, depending on their existing Linux background. Someone who administers Debian or Ubuntu daily sits near the low end; someone new to Linux sits near the high end. Spread over a sustainable 5–10 hours per week , that is a 4–8 week plan. Cramming is a poor fit for this exam because the material is broad but shallow — hundreds of small facts rather than a few deep skills — and small facts are exactly what spaced repetition handles best.

A sample 6-week schedule at roughly 8 hours per week:

  • Week Focus Book chapters Activities
  • 1 Orientation, history, installation 1, 2, 4 Read, set up a Kali VM, first quiz pass
  • 2 Linux fundamentals and the command line 3 Heavy hands-on practice in the VM
  • 3 Configuration and help resources 5, 6 Memorize defaults, man-page usage
  • 4 Securing, monitoring, package management 7, 8 Drill apt/dpkg until automatic
  • 5 Advanced usage, enterprise, custom ISOs 9, 10 Kernel and live-build concepts
  • 6 Security assessments, review, mock exams 11, 12 Full closed-book quiz review of every chapter

Adjust the boundaries to your background, but keep two rules: finish a first full pass of all 12 chapters before deep review, and reserve the final week for nothing but self-testing.

Do Not Skip the 'Boring' Chapters

The chapters candidates skip are the chapters OffSec tests. Book chapters 1 (About Kali Linux), 2 (Getting Started), and 6 (Helping Yourself and Getting Help) feel like filler to an experienced user, yet they are dense with exam-grade facts: Kali's March 2013 first release and its BackTrack lineage; the live system and forensics mode boot entries; the custom kernel patched for wireless injection ; live-build as the image toolchain; and the help-system material — using man pages, understanding that a manual is divided into numbered sections (section 1 for user commands, 5 for file formats, 8 for system administration commands), and knowing where Kali's documentation and community resources live. A question like 'which man section documents configuration file formats' is free points if you read chapter 6 and a coin flip if you skipped it. Budget real time for these chapters early, while your motivation is highest, instead of treating them as skippable preface.

Three Mistakes That Sink Otherwise Prepared Candidates

Rereading instead of self-testing. Rereading feels like progress but trains recognition, not recall. If a study session produced no quiz score, it produced little evidence you can retrieve the material in a proctored, closed-book room.

Studying tools instead of administration. Security tools are, by this guide's own estimate in section 1.3, roughly 5% of the exam — OffSec publishes no official domain weights. Candidates who love Metasploit and Nmap routinely lose points on apt flags and default credentials that a junior Debian administrator would know.

Treating this guide as a replacement for the book. Exam questions are written from the book's exact wording. Use the guide to organize and test your learning, then return to the book's text to settle anything you missed.

Avoid those three traps, keep the loop honest, and the 40–80 hour estimate holds for most candidates.