CompTIA PenTest+ PTO-002
CompTIA PenTest+ is for cybersecurity professionals tasked with penetration testing and vulnerability management.
Accredited by ANSI to show compliance with the ISO 17024 Standard. It is also approved by the DoD for Directive 8140/8570.01-M.
Target group
- Penetration Tester
- Security Consultant
- Cloud Penetration Tester
- Web App Penetration Tester
- Cloud Security Specialist
- Network & Security Specialist
- Information Security Engineer
- Security Analyst
Description
Why is it different?
- CompTIA PenTest+ is the most comprehensive exam covering all penetration testing stages. Unlike other penetration testing exams that only cover a portion of stages with essay questions and hands-on, PenTest+ uses both performance-based and knowledge-based questions to ensure all stages are addressed.
- PenTest+ is the only exam on the market to include all aspects of vulnerability management. It not only covers hands-on vulnerability assessment, scanning, and analysis, but also includes planning, scoping, and managing weaknesses, not just exploiting them.
- PenTest+ is the most current penetration testing exam covering the latest techniques against expanded attack surfaces. It is a unique exam that requires a candidate to demonstrate the most relevant pen testing skills for the cloud, hybrid environments, web applications, customized systems (IoT), and traditional on-premises.
Program
- Duration : 5 days
Domain 1: Planning and Scoping
- Compare and contrast governance, risk, and compliance concepts
- Explain the importance of scoping and organizational/customer requirements
- Given a scenario, demonstrate an ethical hacking mindset by maintaining professionalism and integrity
Domain 2: Information Gathering and Vulnerability Scanning
- Given a scenario, be able to perform passive and active reconnaissance and analyse the results of the reconnaissance exercise
- Ability to perform vulnerability scanning
Domain 3: Attacks and Exploits
- Given a scenario, research attack vectors and have the ability to perform network attacks, wireless attacks, application-based attacks, and attacks
on cloud technologies - Explain common attacks and vulnerabilities against specialized systems
- Given a scenario, perform a social engineering or physical attack
- Ability to perform post-exploitation technique
Domain 4: Reporting and Communication
- Compare and contrast important components of written reports
- Given a scenario, analyse the findings and recommend the appropriate remediation within a report
- Explain the importance of communication during the penetration testing process and potential post-report delivery activities
Domain 5: Tools and Code Analysis
- Explain the basic concepts of scripting and software development
- Given a scenario, analyze a script or code sample for use in a penetration test
- Explain use cases of various tools used during the phases of a penetration test
About the exam
PenTest+ assesses the most up-to-date penetration testing, and vulnerability assessment and management skills necessary to determine the resiliency of the network against attacks. The CompTIA PenTest+ certification exam will verify successful candidates have the knowledge and skills required to:
- Plan and scope a penetration testing engagement.
- Understand legal and compliance requirements.
- Perform vulnerability scanning and penetration testing using appropriate tools and techniques, and then analyse the results.
- Produce a written report containing proposed remediation techniques, effectively communicate results to the management team, and provide practical recommendations.
- Exam Lenght : 1 exam, 90 questions, 165 minutes
- Performance-based Questions
- Penetration testing and vulnerability assessment
CompTIA PenTest+ exam is different because it is not only technical, but also demonstrates that a candidate has the ability to understand and deliver results. A manager could hire a PenTest+ certified individual and fully trust that he or she would alleviate day to day operations".
Josh Skorich
Managing Principal
Goal
CompTIA certifications align with the skillsets needed to support and manage cybersecurity.
Recommended
- Network+,
- Security+ or equivalent knowledge.
- Minimum of 3-4 years of hands-on experience working in a security consultant or penetration tester job role.
Official Kit Content
Learn + CertMaster Labs + Practice + Voucher
- Language : English
- Level : Intermediary
- Certification body : CompTIA
- Certification: Yes
- Accessibility : Yes
- Duration: 5 days
Important information:
Our courses are not registered with the Répertoire National des Certifications Professionnelles (RNCP), but they do comply with the requirements of the Répertoire Spécifique (RS).