Planning and Scoping Penetration Tests

• Introduction to Penetration Testing Concepts
• Plan a Pen Test Engagement
• Scope and Negotiate a Pen Test Engagement
• Prepare for a Pen Test Engagement

Conducting Passive Reconnaissance

• Gather Background Information
• Prepare Background Findings for Next Steps

Performing Non-Technical Tests

• Perform Social Engineering Tests
• Perform Physical Security Tests on Facilities

Conducting Active Reconnaissance

• Scan Networks
• Enumerate Targets
• Scan for Vulnerabilities
• Analyze Basic Scripts

Analyzing Vulnerabilities

• Analyze Vulnerability Scan Results
• Leverage Information to Prepare for Exploitation

Penetrating Networks

• Exploit Network-Based Vulnerabilities
• Exploit Wireless and RF-Based Vulnerabilities
• Exploit Specialized Systems

Exploiting Host-Based Vulnerabilities

• Exploit Windows-Based Vulnerabilities
• Exploit *nix-Based Vulnerabilities

Testing Applications

• Exploit Web Application Vulnerabilities
• Test Source Code and Compiled Apps

Completing Post-Exploit Tasks

• Use Lateral Movement Techniques
• Use Persistence Techniques
• Use Anti-Forensics Techniques

Analyzing and Reporting Pen Test Results

• Analyze Pen Test Data
• Develop Recommendations for Mitigation Strategies
• Write and Handle Reports
• Conduct Post-Report-Delivery Activities

PT0-001: PenTest+ Exam

• PenTest+ Certification Overview
• PenTest+ Exam Structure
• Exam Registration Process
• Time Management
• Topics and Concepts
• PenTest+ Certification Question Structure
• Vendor Interpretation Techniques 

1. CompTIA PenTest+ is uniquely comprehensive.

Unlike many penetration testing certifications, CompTIA PenTest+ covers everything a penetration tester needs to know, from project planning to final reporting. The exam contains both multiple-choice and performance-based questions, validating hands-on cybersecurity skills.

2. CompTIA PenTest+ exam was created by working professionals who know the ropes.

CompTIA exams are created by cybersecurity practitioners from across the globe. These experts have many years of hands-on work experience that makes them ideal to contribute to exam material. CompTIA SMEs come from a variety of professional backgrounds and apply the certification concepts daily.

3. CompTIA PenTest+ assesses an important cybersecurity strategy.

In addition to safe practices, cybersecurity pros must understand attack strategy. CompTIA Cybersecurity Analyst (CySA+) tests defensive skills, while CompTIA PenTest+ encourages IT pros to think offensively. The best security experts use both perspectives to defend against vulnerabilities. Thinking in the mindset of a penetration tester and a hacker helps companies uncover blind spots.

4. We need more penetration testers.

The SMEs agreed that companies do not have enough skilled professionals to keep up with increasing project demand. Cyberseek.org reports 10,929 open jobs for penetration and vulnerability testers in the United States, and CompTIA PenTest+ can help IT pros move up in their career and attain the skills that employers need.

5. CompTIA PenTest+ forms stronger teams

Cybersecurity is a pressing issue for many industries, but few teams have the skills necessary to defend IT systems. According to CompTIA’s Assessing the IT Skills Gap report, 96 percent of IT and business executives agree that too many workers lack advanced skills, including problem-solving, analysis and logical thinking.

CompTIA PenTest+ is for cybersecurity professionals tasked with penetration testing and vulnerability management.  The jobs roles of most CompTIA PenTest+ credential holders are  Penetration Tester, Vulnerability Testers, Security Analyst, Vulnerability Assessment Analyst, Network Security Operations, and Application Security Vulnerability.

Exam:

PT0-001 PenTest+

Duration:

165 minutes

Questions:

Maximum of 85 performance-based and multiple-choice questions

Skills measured:

• Planning and Scoping 15%
• Information Gathering and Vulnerability Identification 22%
• Attacks and Exploits 30%
• Penetration Testing Tools 17%
• Reporting and Communication 16%

While our Training Camp boot camps were developed with the expectation that students do not have enough time to complete a rigorous self-study syllabus prior to attending class, we offer students that feel that extra preparation would be helpful a targeted list of self-study objectives that can be completed.

Candidates for this certification should have Network+, Security+ or equivalent knowledge. Minimum of 3-4 years of hands-on information security or related experience. While there is no required prerequisite, PenTest+ is intended to follow CompTIA Security+ or equivalent experience and has a technical, hands-on focus.