CompTIA PenTest+ Overview

CompTIA PenTest+ Training is for cybersecurity professionals tasked with penetration testing and vulnerability management.

The CompTIA PenTest+ will certify the successful candidate has the knowledge and skills required to plan and scope a penetration testing engagement including vulnerability scanning, understand legal and compliance requirements, analyze results, and produce a written report with remediation techniques.

Unlike other penetration testing exams that only cover a portion of stages with essay questions and hands-on, CompTIA PenTest+ uses both performance-based and knowledge-based questions to ensure all stages are addressed.

CompTIA PenTest+ is the only exam on the market covering hands-on vulnerability assessment, scanning and analysis, as well as planning, scoping, and managing weaknesses.

CompTIA PenTest+ requires a candidate to demonstrate the most relevant pen testing skills for the cloud, hybrid environments, web applications, Internet of Things (IoT) and traditional on-premises.

CompTIA PenTest+ Outline

Module 1: Scoping Organizational/Customer Requirements

• Define Organizational PenTesting
• Acknowledge Compliance Requirements
• Compare Standards and Methodologies
• Describe Ways to Maintain Professionalism

Module 2: Defining the Rules of Engagement

• Assess Environmental Considerations
• Outline the Rules of Engagement
• Prepare Legal Documents

Module 3: Footprinting and Gathering Intelligence

• Discover the Target
• Gather Essential Data
• Compile Website Information
• Discover Open-Source Intelligence Tools

Module 4: Evaluating Human and Physical Vulnerabilities

• Exploit the Human Psyche
• Summarize Physical Attacks
• Use Tools to Launch a Social Engineering Attack

Module 5: Preparing the Vulnerability Scan

• Plan the Vulnerability Scan
• Detect Defenses
• Utilize Scanning Tools

Module 6: Scanning Logical Vulnerabilities

• Scan Identified Targets
• Evaluate Network Traffic
• Uncover Wireless Assets

Module 7: Analyzing Scanning Results

• Discover Nmap and NSE
• Enumerate Network Hosts
• Analyze Output from Scans

Module 8: Avoiding Detection and Covering Tracks

• Evade Detection
• Use Steganography to Hide and Conceal
• Establish a Covert Channel

Module 9: Exploiting the LAN and Cloud

• Enumerate Hosts
• Attack LAN Protocols
• Compare Exploit Tools
• Discover Cloud Vulnerabilities
• Explore Cloud-Based Attacks

Module 10: Testing Wireless Networks

• Discover Wireless Attacks
• Explore Wireless Tools

Module 11: Targeting Mobile Devices

• Recognize Mobile Device Vulnerabilities
• Launch Attacks on Mobile Devices
• Outline Assessment Tools for Mobile Devices

Module 12: Attacking Specialized Systems

• Identify Attacks on the IoT
• Recognize Other Vulnerable Systems
• Explain Virtual Machine Vulnerabilities

Module 13: Web Application-Based Attacks

• Recognize Web Vulnerabilities
• Launch Session Attacks
• Plan Injection Attacks
• Identify Tools

Module 14: Performing System Hacking

• System Hacking
• Use Remote Access Tools
• Analyze Exploit Code

Module 15: Scripting and Software Development

• Analyze Scripts and Code Samples
• Create Logic Constructs
• Automate Penetration Testing

Module 16: Leveraging the Attack: Pivot and Penetrate

• Test Credentials
• Move Throughout the System
• Maintain Persistence

Module 17: Communicating During the PenTesting Process

• Define the Communication Path
• Communication Triggers
• Use Built-In Tools for Reporting

Module 18: Summarizing Report Components

• Identify Report Audience
• List Report Contents
• Define Best Practices for Reports

Module 19: Recommending Remediation

• Employ Technical Controls
• Implement Administrative and Operational Controls
• Apply Physical Controls

Module 20: Performing Post-Report Delivery Activities

• Conduct Post-Engagement Cleanup
• Execute Follow-Up Actions

CompTIA PenTest+ Training Includes

• 25-Year Veteran Instructor with Over 60,000 Students Trained and the Best Pass Rates in the Industry
• “Pass on the First Attempt!” Guarantee
• Online Live Instructor-Led Training
• 1 Year Access to Training Session Recordings
• Enhanced Official CompTIA Courseware
• Official Virtual Lab Environment
• Fast-Track Exam Preparation
• Exam Vouchers
• After Class Support and Mentoring

CompTIA PenTest+ Audience

• Penetration tester
• Security analyst
• Security consultant
• Vulnerability analyst
• Web app penetration tester
• Software engineer
• Network/System Administrator

About CompTIA PenTest+ Exam

• Exam title: PT0-002
• Number of questions: 85
• Duration: 165 minutes
• Passing Score: 750 (on a scale of 100-900)
• Availability: Pearson Vue
• Test Format: Multiple Choice and Performance Based Questions

About the CompTIA PenTest+ Instructor

Eric Reed is a nationally recognized cybersecurity instructor and founder of Eric Reed Cybersecurity Training, with over 25 years of experience developing mission-ready IT and security professionals. A Master Certified EC-Council Instructor and 10-time Instructor of the Year—including the 2024 CEH Instructor of the Year from EC-Council—Eric has trained more than 60,000 students worldwide across certifications including CompTIA Security+, CySA+, PenTest+, CISSP, and CEH.

Renowned for his engaging teaching style and unmatched pass rates, Eric has delivered training for leading organizations across defense, government, healthcare, finance, and technology—including Boeing, Lockheed Martin, Verizon, the U.S. Department of Defense, and the Mayo Clinic. His programs emphasize real-world application, DoD 8140/NICE alignment, and first-attempt success, helping individuals and teams strengthen their defenses and advance their careers in cybersecurity.