Free study guide

CompTIA PenTest+ PT0-003 Study Guide

CompTIA PenTest+ PT0-003

CompTIA PenTest+ (PT0-003) is an intermediate exam for penetration testers. It covers engagement management, reconnaissance and enumeration, vulnerability discovery, attacks and exploits, and post-exploitation. This guide keeps to the concepts and terms the exam asks about.

  • Exam code PT0-003
  • Intermediate level
  • 5 exam domains

This guide is free, with no sign-up. It explains every CompTIA PenTest+ PT0-003 exam topic in plain English, one chapter at a time. Read them in order or jump straight to the topic you need.

  • 5chapters
  • 31topics
  • 9diagrams and exhibits
  • 2 h 28 minfast track
Start with Engagement Management
  • Every topic follows the same simple pattern: what it is, how it works, common mistakes
  • Diagrams and real command output where a picture explains it best
  • Exam tips and worked subnetting and IPv6 practice, with answers

How the exam is weighted

Each domain is worth this share of the exam, so spend your study time in proportion. Select a domain to open its chapter.

Chapters

Open a chapter to see its topics and how long each takes.

1Engagement Management5 topics · 25 min fast trackScoping, rules of engagement, legal duties, team communication and how reports are written.
  1. 1Planning and Scoping an Engagement5 min
  2. 2Legal and Ethical Compliance5 min
  3. 3Collaboration and Communication5 min
  4. 4Report Structure and Executive Summary5 min
  5. 5Findings and Remediation Recommendations5 min
Read the chapter overview →
2Reconnaissance and Enumeration6 topics · 28 min fast trackPassive and active information gathering, enumeration, Nmap, Wireshark and script changes.
  1. 1Passive Reconnaissance and OSINT4 min
  2. 2Active Reconnaissance and Network Sniffing5 min
  3. 3Enumeration Techniques5 min
  4. 4Nmap Scan Types and Options4 min
  5. 5Wireshark, Shodan and Other Recon Tools5 min
  6. 6Script Modification for Recon5 min
Read the chapter overview →
3Vulnerability Discovery and Analysis5 topics · 22 min fast trackScan types, SAST and DAST, validating results and the main scanning tools.
  1. 1Vulnerability Scan Types4 min
  2. 2SAST, DAST and Code Scanning5 min
  3. 3Analysing Scan Results5 min
  4. 4Vulnerability Discovery Tools4 min
  5. 5Physical Security Concepts4 min
Read the chapter overview →
4Attacks and Exploits10 topics · 49 min fast trackNetwork, authentication, host, web, cloud and AI attacks, with indicators and defences for each.
  1. 1Network Attacks6 min
  2. 2Authentication Attacks5 min
  3. 3Host-Based Attacks6 min
  4. 4Web Application Attacks6 min
  5. 5Cloud-Based Attacks5 min
  6. 6Attacks on AI Systems5 min
  7. 7Social Engineering Attacks4 min
  8. 8Wireless Attacks4 min
  9. 9Attacks on Specialized Systems4 min
  10. 10Scripting and Attack Automation4 min
Read the chapter overview →
5Post-Exploitation and Lateral Movement5 topics · 24 min fast trackPersistence, pivoting, cleanup and documenting attack paths with remediation.
  1. 1Persistence Concepts5 min
  2. 2Lateral Movement and Pivoting6 min
  3. 3Cleanup and Restoration4 min
  4. 4Documentation and Attack Narratives5 min
  5. 5Staging and Exfiltration4 min
Read the chapter overview →

Ready for more practice?

The full CompTIA PenTest+ PT0-003 question bank has 653 questions, with timed practice exams and an explanation for every answer.

SubscribeTry Sample Exam

This study guide is independent and is not affiliated with, endorsed by, or sponsored by CompTIA. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.