CompTIA PenTest+ · PT0-003
PenTest+ Practice Exam
Try 10 exam-style PT0-003 questions with full explanations, then the full bank of 700+ when you're ready.
- Questions
- Up to 90 questions
- Time
- 165 minutes
- Passing score
- 750 (on a scale of 100-900)
Planning and Scoping
A penetration testing firm is establishing a long-term relationship with a new client. Which of the following documents defines the general relationship between the parties and covers universal terms such as payment, indemnification, and intellectual property rights?
Information Gathering and Recon
A penetration tester connects to a service on port 21 and receives the string '220 ProFTPD 1.3.5 Server (ProFTPD Default Installation)'. This technique is an example of which of the following?
Attacks and Exploits
During a web assessment of a WordPress site, which tool should the tester use to identify outdated plugins and themes effectively?
Reporting and Communication
What is the primary objective of performing a peer review on a penetration testing report before it is delivered to the client?
Tools and Code Analysis
When using Nikto to scan a web server, which of the following is the default behavior if no port is specified for an HTTPS URL?
Planning and Scoping
In the Purdue Enterprise Reference Architecture (PERA), which level typically contains the enterprise-wide business systems, such as email servers and ERP systems?
Information Gathering and Recon
A penetration tester is explaining the CVSS scoring system to a client. The client asks which metric group accounts for the fact that a public exploit for a vulnerability has just been released on the internet. Which group should the tester reference?
Attacks and Exploits
A penetration tester is using WiGLE.net during the reconnaissance phase of a wireless assessment. What is the primary benefit of using this specific resource?
Reporting and Communication
During the peer review of a report, a senior tester notices that the junior tester included screenshots of cleartext passwords found in a database. What should the senior tester recommend?
Tools and Code Analysis
A tester is performing a network scan in a highly sensitive environment where an IDS is known to trigger on rapid connection attempts. Which Nmap timing template should be used to minimize the risk of detection?
What the PT0-003 exam covers
13%
Engagement Management
Pre-engagement activities, RoE, agreement types, methodologies, and report components
21%
Reconnaissance and Enumeration
Passive/active recon, OSINT, scanning, and enumeration techniques
17%
Vulnerability Discovery and Analysis
Container/app/network scans, exploit selection, and physical security
35%
Attacks and Exploits
Network, authentication, host-based, web app, cloud, wireless, and AI/specialized attacks
14%
Post-exploitation and Lateral Movement
Persistence, lateral movement, exfiltration, and cleanup activities
About our PenTest+ practice exam
Our PenTest+ practice exam prepares you for all five PT0-003 domains: Engagement Management, Reconnaissance and Enumeration, Vulnerability Discovery and Analysis, Attacks and Exploits, and Post-exploitation and Lateral Movement. Questions reflect the latest exam update including cloud, web application, and API penetration testing topics.
- Understand the full penetration testing lifecycle from scoping to final report
- Learn to identify and exploit common vulnerabilities in realistic scenarios
- Master the tools and techniques used by professional penetration testers
- Practice writing clear, actionable findings and remediation recommendations
- Build the foundation for advanced certifications like OSCP
Attack Scenario Questions
Practice identifying and exploiting vulnerabilities across network, web application, social engineering, and cloud environments.
Tool Knowledge
Questions covering Nmap, Metasploit, Burp Suite, Nessus, and other industry-standard pentest tools and their appropriate use cases.
Recon and OSINT
Master information gathering techniques including passive recon, active scanning, and vulnerability enumeration.
Report Writing Scenarios
Practice categorizing findings by severity, writing remediation recommendations, and communicating results to clients.
Frequently asked questions
- How many questions are on the PenTest+ exam?
- PT0-003 has up to 90 questions with a 165-minute time limit. Passing score is 750 out of 900. The exam includes multiple choice questions and performance-based questions.
- Is PenTest+ harder than Security+?
- PenTest+ covers more specialized offensive security material than Security+. If you have Security+ and understand networking well, PenTest+ is a manageable next step. OSCP is significantly harder.
- Do I need to know how to code for PenTest+?
- Basic scripting knowledge (Python, Bash) helps, but you don't need to be a developer. The exam tests your ability to read and understand scripts and identify what they do, not write complex code from scratch.
- What is the difference between PT0-002 and PT0-003?
- PT0-003 (the current version) adds more coverage of cloud penetration testing, API testing, and modern attack techniques. If you have old study materials for PT0-002, the core concepts still apply but update your materials.
- Is there a money-back guarantee?
- Yes, 7-day money-back guarantee, no questions asked. Try 30 free questions first without signing up.
Practice PenTest+ PBQs
Performance-based questions (PBQs) are the hands-on simulations on the real exam. Practice them in our PBQ labs.
More PenTest+ resources
Ready to pass PenTest+?
Practice by domain, take timed mock exams and see exactly where to focus next.
Get started