This PenTest+ study guide covers everything you need for the PT0-003 exam. Whether you're transitioning into offensive security or adding pentest skills to your toolkit, this guide walks you through the full penetration testing lifecycle that CompTIA tests.
The exam at a glance
| Exam code | PT0-003 |
|---|---|
| Questions | Up to 90 questions |
| Time | 165 minutes |
| Passing score | 750 (on a scale of 100-900) |
| Price (US) | $439 USD |
What each domain tests
Engagement Management
13%Pre-engagement activities, RoE, agreement types, methodologies, and report components
Reconnaissance and Enumeration
21%Passive/active recon, OSINT, scanning, and enumeration techniques
Vulnerability Discovery and Analysis
17%Container/app/network scans, exploit selection, and physical security
Attacks and Exploits
35%Network, authentication, host-based, web app, cloud, wireless, and AI/specialized attacks
Post-exploitation and Lateral Movement
14%Persistence, lateral movement, exfiltration, and cleanup activities
Study plan
- Weeks 1-2
Foundation
Build foundational pentest knowledge and understand the exam structure
- Review the PT0-003 exam objectives and domain weights
- Study the penetration testing methodology and legal/ethical requirements
- Learn the rules of engagement, scoping, and authorization concepts
- Set up a basic lab environment (even VirtualBox + Kali Linux helps)
- Start flashcards for pentest tools and terminology
- Weeks 3-6
Technical Skills
Work through each technical domain with hands-on context
- Recon: OSINT techniques, Nmap scanning, service enumeration
- Attacks: network attacks, web app vulnerabilities, social engineering
- Exploitation: understand Metasploit workflow, post-exploitation concepts
- Cloud & API: modern attack surfaces tested on PT0-003
- Complete 50+ practice questions per domain and review all wrong answers
- Weeks 7-8
Exam Prep
Full exam simulations and solidifying weak areas
- Take 3+ full-length timed practice exams
- Use Aurora AI to drill any confusing concepts
- Review Engagement Management, including report components and remediation recommendations
- Know your tools: what each tool does and when to use it
- Target 80%+ before booking
Exam day tips
- Know the difference between active and passive reconnaissance, expect multiple questions on this
- Understand scoping and rules of engagement thoroughly, legal/ethical questions appear frequently
- Reporting now sits inside Engagement Management (13%), so know report components, severity ratings and remediation recommendations
- For tools: know Nmap flags, Metasploit modules, and Burp Suite functionality conceptually
- Web app attacks are heavily tested, understand OWASP Top 10 at minimum
- PT0-003 includes cloud and API testing content, don't skip those objectives
FAQ
- How long does it take to study for PenTest+?
- Most candidates with Security+ spend 2-3 months. If you also have networking experience, you can often do it in 6-8 weeks with consistent daily study.
- Do I need a home lab for PenTest+?
- A lab helps but isn't required to pass the exam. The exam includes performance-based questions that test how you apply tools and techniques in scenarios, so hands-on practice helps. That said, even a simple VirtualBox setup will deepen your understanding.
- What's the difference between PenTest+ and OSCP?
- PenTest+ combines multiple-choice and performance-based questions in a proctored 165-minute exam, and CompTIA recommends 3 to 4 years of penetration testing experience. OSCP is a hands-on, 24-hour exam requiring you to actually compromise systems. PenTest+ is a strong foundation before pursuing OSCP.
- Is PenTest+ recognized by employers?
- Yes, especially for entry-level offensive security and vulnerability analyst roles. For senior pentest positions, employers often prefer OSCP, but PenTest+ demonstrates foundational knowledge and commitment.