1.3 PEN-103 Syllabus & Study Path

Kali Linux Certified Professional KLCP

Track your progress as you read

Finished sections get a check mark.

1 Introduction & Exam Overview

1.1 Current Exam Facts 1.2 How to Use This Guide & Study Strategy 1.3 PEN-103 Syllabus & Study Path

2 About Kali Linux

2.1 A Bit of History: From BackTrack to Kali 2.2 Kali's Relationship with Debian 2.3 Purpose and Use Cases 2.4 Main Features and Design Policies

3 Getting Started with Kali Linux

3.1 Downloading and Verifying a Kali ISO 3.2 Booting Kali in Live Mode 3.3 Installation Options Overview 3.4 Troubleshooting Installations

4 Linux Fundamentals

4.1 What Linux Is and What It Does 4.2 The Command Line 4.3 The Filesystem Hierarchy Standard 4.4 Useful Commands: Files, Search, Environment

5 Permissions and Process Management

5.1 File Permissions and Ownership 5.2 Managing Processes 5.3 Shells, Variables, and the Environment

6 Installing Kali Linux

6.1 Minimal Installation Requirements 6.2 Step-by-Step Installation on a Hard Drive 6.3 Unattended Installations with Preseeding 6.4 ARM Installations

7 Configuring the Network, Users, and SSH

7.1 Configuring the Network 7.2 Managing Unix Users and Groups 7.3 Configuring SSH

8 Configuring Services

8.1 Apache Web Server 8.2 PostgreSQL Database 8.3 Managing Services with systemd

9 Helping Yourself and Getting Help

9.1 Documentation Sources 9.2 Kali Linux Communities 9.3 Filing Good Bug Reports

10 Security Policy and Network Services

10.1 Defining a Security Policy 10.2 Possible Security Measures 10.3 Securing Network Services

11 Firewalling and Monitoring

11.1 Netfilter and iptables Behavior 11.2 Writing iptables Rules and NAT 11.3 Monitoring and Logging

12 Debian Package Management: APT

12.1 Introduction to APT 12.2 The sources.list File 12.3 Kali Repositories 12.4 Basic Package Interaction with apt

13 dpkg and Advanced Package Management

13.1 dpkg Fundamentals 13.2 Inspecting .deb Files and Package State 13.3 Maintainer Scripts and Conffiles 13.4 APT Pinning and Package Authenticity

14 Advanced Usage

14.1 Modifying and Rebuilding Kali Packages 14.2 Recompiling the Kernel 14.3 Building Custom Kali Live ISO Images 14.4 USB Persistence with LUKS Encryption

15 Kali Linux in the Enterprise

15.1 Network Installation with PXE Boot 15.2 Configuration Management with SaltStack 15.3 Metapackages and Custom Repositories 15.4 Configuration Packages and Forking

16 Introduction to Security Assessments

16.1 Kali Linux in an Assessment 16.2 Types of Assessments 16.3 Types of Attacks 16.4 Formalization and the Road Ahead

1.3 PEN-103 Syllabus & Study Path

Key Takeaways Explain This Topic AI

The exam draws from all 12 chapters of the Kali Linux Revealed book; OffSec publishes no official domain weights, so this guide groups the material into seven domains with ExamFinch-estimated weights.

By ExamFinch's estimate, fundamentals & configuration and package management each carry about 20% of the exam — together roughly 40% of your score.

Estimated weights for the remaining domains: internals/filesystem ~18%, customization/ISO building ~15%, networking/services ~12%, bash ~10%, and security tools ~5%.

Package management (book chapter 8: dpkg, apt, repositories) is the single highest-value book chapter to master; this guide covers it in chapters 12 and 13.

This guide's 16 chapters map onto the 12 book chapters, splitting the heaviest domains into dedicated chapters.

Last updated: July 2026

The Seven Exam Domains

PEN-103's syllabus is the Kali Linux Revealed book itself: the exam draws from all 12 chapters , with no chapter exempt. To make study planning possible, this guide groups those chapters into seven domains with approximate exam weights. One caveat up front: OffSec does not publish official domain weights for KLCP — the official exam guidance states only that the exam covers the whole Kali Linux Revealed book. The weights below are ExamFinch's estimates , derived from observed question distribution, and exist purely to help you prioritize study time; treat them as informed approximations, not exam policy. Used that way, the weights tell you where your hours should go: a domain estimated at 20% deserves roughly four times the attention of one estimated at 5%.

Domain Estimated weight* Source book chapters Core topics

Kali fundamentals & configuration 20% 1, 2, 5, 6 History, defaults, desktop, network and user configuration, man pages and help resources

Package management 20% 8 dpkg, apt, repositories, source packages
Internals & filesystem 18% 3, 4 FHS layout, installation, partitioning, boot process
Customization & ISO building 15% 9, 10 Kernel recompilation, live-build, enterprise deployment
Networking & services 12% 5, 7, 10 Network configuration, systemctl, monitoring, securing services
Bash & command line 10% 3 Shell usage, pipes, environment, permissions
Security tools & assessments 5% 11, 12 Assessment methodology, tool categories

*Weights are ExamFinch estimates based on question distribution; OffSec does not publish official KLCP domain weights.

Reading the Estimated Weights

Two conclusions fall out of the table immediately. First, by ExamFinch's estimate, fundamentals & configuration plus package management equal about 40% of the exam . If you master Kali's defaults (zsh since 2020.4, Xfce, kali/kali live credentials, services disabled by default, kali-rolling as the primary repository) and the Debian packaging toolchain (dpkg for local .deb files, apt for repository-aware dependency resolution), you have banked nearly half the points you need. Second, the middle tier — internals/filesystem and customization/ISO — is another third of the exam, and these are the domains where hands-on VM practice pays off most, because questions about the FHS directory layout or the live-build workflow are much easier to remember if you have actually typed the commands.

Notice what is not dominant: security tools sit at about 5% in this estimate. Candidates with penetration-testing backgrounds routinely over-study tools and under-study packaging. KLCP certifies Kali Linux knowledge, not exploitation skill.

How the Guide's 16 Chapters Map to the Syllabus

The guide expands the book's 12 chapters into 16 study chapters so that the heaviest domains get room. The mapping below shows which book chapter each guide chapter teaches and which domain it serves; use it to plan your read-quiz-review passes and to trace any quiz miss back to its source chapter in the book.

Guide chapter Book chapter(s) Domain
1. Introduction & Exam Overview — Orientation
2. About Kali Linux 1 Fundamentals
3. Getting Started with Kali Linux 2 Fundamentals
4. Linux Fundamentals 3 Bash / Internals
5. Permissions and Process Management 3 Bash / Internals
6. Installing Kali Linux 4 Internals & filesystem
7. Configuring the Network, Users, and SSH 5 Configuration / Networking
8. Configuring Services 5 Configuration / Networking & services
9. Helping Yourself and Getting Help 6 Fundamentals
10. Security Policy and Network Services 7 Networking & services
11. Firewalling and Monitoring 7 Networking & services
12. Debian Package Management: APT 8 Package management
13. dpkg and Advanced Package Management 8 Package management
14. Advanced Usage 9 Customization & ISO
15. Kali Linux in the Enterprise 10 Customization / Networking
16. Introduction to Security Assessments 11, 12 Security tools
Building Your Study Path

Work the chapters in order the first time through — the material is deliberately cumulative, with fundamentals before package management and package management before the advanced usage and enterprise chapters. On your second pass, reorder by ExamFinch's estimated weights: chapters 12 and 13 (package management), then 2, 3, 7, 8, and 9 (fundamentals and configuration), then 4, 5, 6, and 14 (internals, bash, and customization), with chapters 10, 11, 15, and 16 closing out networking and services, enterprise deployment, and security assessments.

Before scheduling your exam attempt, hold yourself to a readiness checklist:

You can recite the defaults table from section 1.1 without notes — shell, desktop, credentials, repository, release date, Debian base.

You can explain the difference between dpkg and apt in one sentence each, and name what kali-rolling, kali-dev, and kali-bleeding-edge are for.

You can sketch the FHS top-level directories and say what lives in /etc, /var, /usr, and /opt.

You score consistently well on every guide chapter's quizzes taken closed-book, including the chapters you think are boring.

When all four are true, you are ready to book the ClassMarker session — and if you hold a Learn Fundamentals or Learn One subscription, remember that an attempt is already included.

Domain Traps Worth an Extra Pass

Each domain has a characteristic trap the exam writers lean on. In fundamentals , candidates confuse BackTrack's final Ubuntu base with Kali's clean rebuild on Debian, and forget that BackTrack itself merged WHAX and the Auditor Security Collection. In package management , the trap is believing apt replaces dpkg rather than building on top of it — dpkg handles individual .deb files while apt resolves dependencies across repositories. In internals/filesystem , the trap is assuming Kali deviates from the Filesystem Hierarchy Standard; it is FHS-compliant. In customization , candidates assume live-build is a third-party add-on when it is Kali's own image toolchain, used alongside the custom kernel patched for wireless injection. In networking , the trap is assuming SSH or Apache runs out of the box — network services are disabled by default. In bash , the classic miss is confusing the interactive default (zsh) with the POSIX script interpreter (/bin/sh is dash). And in security tools , the trap is strategic rather than factual: over-studying a 5% domain while a 20% domain goes unreviewed.