Exam PT0-003
CompTIA PenTest+
Master penetration testing and ethical hacking with hands-on skills.
- Questions
- Up to 90 questions
- Time
- 165 minutes
- Passing score
- 750 (on a scale of 100-900)
- Exam price (US)
- $439 USD
Planning and Scoping
A penetration testing firm is establishing a long-term relationship with a new client. Which of the following documents defines the general relationship between the parties and covers universal terms such as payment, indemnification, and intellectual property rights?
Information Gathering and Recon
A penetration tester connects to a service on port 21 and receives the string '220 ProFTPD 1.3.5 Server (ProFTPD Default Installation)'. This technique is an example of which of the following?
Attacks and Exploits
During a web assessment of a WordPress site, which tool should the tester use to identify outdated plugins and themes effectively?
PenTest+ exam domains
13%
Engagement Management
Pre-engagement activities, RoE, agreement types, methodologies, and report components
21%
Reconnaissance and Enumeration
Passive/active recon, OSINT, scanning, and enumeration techniques
17%
Vulnerability Discovery and Analysis
Container/app/network scans, exploit selection, and physical security
35%
Attacks and Exploits
Network, authentication, host-based, web app, cloud, wireless, and AI/specialized attacks
14%
Post-exploitation and Lateral Movement
Persistence, lateral movement, exfiltration, and cleanup activities
About PenTest+
CompTIA PenTest+ validates offensive security skills including penetration testing, vulnerability assessment, and reporting. It's a cert that covers all stages of a pentest, from planning and scoping through reporting.
How we help you pass
700+ practice questions
Every PenTest+ domain, with a detailed explanation for each answer.
Timed mock exams
Full-length exam simulations with a score breakdown by domain, so you know where to focus.
300+ flashcards
Key terms and acronyms with spaced repetition, so they stick.
Aurora AI tutor
Ask about any PenTest+ question or concept and get a plain-English explanation.
Frequently asked questions
- What is CompTIA PenTest+ PT0-003?
- PT0-003 is the latest version of CompTIA PenTest+, updated to reflect modern attack techniques including cloud, web application, and API testing. It covers the full pentest lifecycle.
- Do I need Security+ before PenTest+?
- Security+ or equivalent knowledge is recommended. PenTest+ assumes you understand security fundamentals. Network+ knowledge also helps significantly since network attacks are heavily tested.
- Is PenTest+ worth it vs. CEH or OSCP?
- PenTest+ is vendor-neutral and more accessible than OSCP. CEH is knowledge-based like PenTest+. OSCP is hands-on and more valued for senior roles. PenTest+ is ideal for building a foundation before pursuing OSCP.
- What tools should I know for PenTest+?
- Nmap, Metasploit, Wireshark, Burp Suite, Nessus/OpenVAS, Hydra, John the Ripper, Gobuster, and basic scripting in Python or Bash. Expect multiple-choice questions plus performance-based questions that may ask you to interpret tool output or choose the right tool and command.
- What jobs can PenTest+ help me get?
- Penetration Tester, Ethical Hacker, Vulnerability Analyst, Red Team Analyst, and Security Consultant. It's a strong entry point into offensive security roles.
Practice PenTest+ PBQs
Performance-based questions (PBQs) are the hands-on simulations on the real exam. Practice them in our PBQ labs.
More PenTest+ resources
Ready to pass PenTest+?
Practice by domain, take timed mock exams and see exactly where to focus next.
Get started