COMPTIACompTIA PenTest+
CompTIA PenTest+ validates your ability to identify, mitigate, and report system vulnerabilities. It covers all stages of penetration testing across various attack surfaces, emphasizing hands-on skills. This certification is ideal for penetration testers and security consultants aiming to advance their careers.
433 practice questions · Updated 2026-07-30
5Domains
19Objectives
124Concepts
433Questions
PT0-003 Curriculum
Every domain, objective, and concept the PT0-003 exam measures.
- Rules of Engagement
- Testing Windows
- Target Selection
- Authorization Letters
- Mandatory Reporting Requirements
- Regulatory Adherence
- Stakeholder Alignment
- Peer Review Process
- Escalation Pathways
- Risk Articulation
- Executive Summary Creation
- Findings Documentation
- Remediation Recommendations
- Report Structure
- Technical and Non-Technical Language
- Visual Data Representation
- Impact Analysis
- Prioritization of Findings
- OSINT Techniques
- Network Sniffing
- Protocol Scanning
- Data Collection from OSINT
- Traffic Analysis
- Service Enumeration
- DNS Enumeration Basics
- DNS Zone Transfer
- Reverse DNS Lookup
- Service Discovery Techniques
- Port Scanning
- Banner Grabbing
- Directory Enumeration Basics
- Web Directory Scanning
- File Enumeration
- Nmap Basics
- Nmap Scripting Engine
- Wireshark Packet Capture
- Wireshark Filters
- Shodan Search Techniques
- Shodan API Usage
- Python Script Structure
- Python Libraries for Reconnaissance
- Python Script Customization
- PowerShell Script Structure
- PowerShell Cmdlets for Reconnaissance
- PowerShell Script Customization
- Bash Script Structure
- Bash Utilities for Reconnaissance
- Bash Script Customization
- Authenticated Vulnerability Scans
- Unauthenticated Vulnerability Scans
- Static Application Security Testing (SAST)
- Dynamic Application Security Testing (DAST)
- Finding Validation
- Configuration Troubleshooting
- False Positive Identification
- Nessus Installation
- Nessus Scan Configuration
- Nessus Report Analysis
- Nikto Installation
- Nikto Scan Execution
- Nikto Output Interpretation
- OpenVAS Installation
- OpenVAS Scan Management
- OpenVAS Report Analysis
- VLAN Hopping Techniques
- Mitigating VLAN Hopping
- On-Path Attack Fundamentals
- Detecting On-Path Attacks
- Service Exploitation Techniques
- Preventing Service Exploitation
- Brute-force attack methodology
- Tools for brute-force attacks
- Mitigation of brute-force attacks
- Pass-the-hash attack technique
- Tools for pass-the-hash attacks
- Defending against pass-the-hash attacks
- Credential stuffing attack process
- Tools for credential stuffing attacks
- Preventing credential stuffing attacks
- Privilege Escalation Techniques
- Exploiting Vulnerabilities for Privilege Escalation
- Process Injection Methods
- DLL Injection
- Credential Dumping Techniques
- Using Tools for Credential Dumping
- Memory Manipulation for Process Injection
- Security Bypasses for Privilege Escalation
- SQL Injection Basics
- Identifying SQL Injection Vulnerabilities
- Exploiting SQL Injection
- Cross-Site Scripting (XSS) Basics
- Identifying XSS Vulnerabilities
- Exploiting XSS
- Directory Traversal Basics
- Identifying Directory Traversal Vulnerabilities
- Exploiting Directory Traversal
- Container Escape Techniques
- Metadata Service Exploitation
- IAM Misconfiguration Identification
- Container Security Best Practices
- Cloud Metadata Service Security
- IAM Policy Configuration
- Prompt Injection
- Model Manipulation
- AI System Vulnerabilities
- Defense Against Prompt Injection
- Defense Against Model Manipulation
- Persistence Mechanisms
- Scheduled Tasks
- Registry Modifications
- Service Manipulation
- Credential Harvesting
- Pass-the-Hash
- Pass-the-Ticket
- Remote Desktop Protocol (RDP)
- Network Shares
- Artifact Identification
- Artifact Removal
- Log Manipulation
- Attack Narrative Creation
- Identifying Key Events
- Impact Analysis
- Remediation Recommendation Development
- Communicating Findings
Ready to practice?Test your knowledge with exam-style questions or take an intelligent quiz tailored to your level.
Percentages reflect share of the current practice bank, not official exam weightings — no structured per-skill weight is published for PT0-003, so none is invented.