CompTIA PenTest+ (PT0-002) - Exam Coaching

Develop a game plan for planning and scoping in the pen testing exam by building a glossary of definitions and mastering pen testing process, cyber kill chain, and threat landscape.

Master the key pen test documents for planning and scoping—RFI, RFP, MSA, NDA, SOW, authorization, and risk register—and apply risk responses of acceptance, reduction, transfer, and avoidance with risk monitoring.

Explore testing approaches for security assessments, including goals-based, compliance-based, and red/blue team drills, plus data protection and black/white/grey box strategies for application testing.

Explore the threat landscape by identifying threat actors: script kiddies, hacktivists, insider threats, organized crime, and advanced persistent threat, and how motivation, capability, and opportunity drive attacks.

Master the four-phase pen testing process: planning and scoping, information gathering and vulnerability scanning, attack and exploit, and reporting and communication, along with rules of engagement, authorization, and post-engagement cleanup.

Master the cyber kill chain from reconnaissance to actions on objective, including weaponization, delivery, exploitation, installation, and command and control, while defenders protect confidentiality, integrity, and availability.

Assess how the master service agreement and non-disclosure agreement protect data in a pentest. Recognize that a statement of understanding is a distractor.

Dissect the audience, tailor the report’s depth, and deliver findings securely to stakeholders. Balance high-level summaries for security specialists with detailed methods for management and HR policy implications.

Explore the components of a communication plan for a pen test, including contact information, schedule, and secure protocols. Apply deductive reasoning to determine what is not part of the plan.

Review exam questions on risk by matching terms to definitions, focusing on risk avoidance, reduction, and transfer; monitor risk continuously and recognize residual risk and acceptance.

Distinguish white box and gray box testing in a web-based pen test, given no source code access, while excluding static code analysis and total solution testing.

Anticipate exam questions by mastering the right tools for information gathering and vulnerability scanning, practice hands-on in a lab, and memorize tcp/ip basics, ports, protocols, map syntax, and cbc scoring.

Explore osint tools to identify, search, and correlate public data for passive information gathering in open source intelligence, using Harvester, Showdown, Maltego, Census, and FOCA.

Master the fundamentals of protocols, ports, and services, compare UDP and TCP, and learn the TCP three-way handshake, packet headers, and flags for proper connection establishment.

Access the whois database via web or command line, then use epic, netcat, Burp Suite, and Zap for information gathering and header analysis, with Nessus or open source vulnerability scanners.

Use nmap to issue scans against targets and interpret results as open, closed, or filtered ports, with practice in labs and scripting engine categories for brute force, exploits, and fuzzing.

Learn how security content automation protocols standardize vulnerability data, focusing on CVSS and CVE metrics, including attack vector, complexity, authentication, user interaction, and impact on confidentiality, integrity, and availability.

Explore how netcat is used to perform a banner grab for footprinting a host, revealing port 80 responses and aiding fingerprinting of an organization's systems.

Master ports and services by matching them to default ports, such as FTP control on 21 and FTP data on 20, and memorize SNMP 161 and LDAP 389.

Explore Nmap scanning syntax to map networks and hosts, choosing a scan type that avoids full tcp connections and uses a syn packet, with options like -sT, -sS, and -sU.

Interpret map port scan results by identifying open, closed, and filtered ports; learn that syn scan is half-open, while full connect uses a complete handshake, and avoid vulnerability assumptions.

Rank CVSS attack vectors from highest to lowest risk, starting with physical access and moving through local, adjacent, and network proximity. Recognize online and patched as distractors in the matching.

Develop a practical game plan for the attacks and exploits section of the PenTest+ exam, emphasizing tool selection, lab practice, web attack signatures, and locating password, shadow, and registry data.

Explore common attack tools, including password crackers like hash, cat, medusa, and hydra, and tools such as mimi cats, burp suite, and metasploit in a safe lab.

Discover essential operating system characteristics for pen testing, including locating Linux and Windows files such as passwd, shadow, configuration, log and event log files, and backups.

Explore how to exploit hosts using bind and reverse shells, web shells, and the Metasploit framework to deliver payloads, establish shells, and maintain access.

Explore brute force and dictionary attacks, understand hashing versus encryption, and learn about rainbow tables, with hands-on practice using John the Ripper, aircrack, and Hydra.

Uncover OWASP top ten web vulnerabilities, from injection and cross-site scripting to insecure direct object references and file inclusion, with static and dynamic testing tools.

Identify a web exploit by manipulating a URL parameter to reveal unauthorized documents, highlighting insecure direct object reference and how to recall the exact ordering with mnemonic tips.

Explain the steps of reflected XSS: crafting a malicious link, the victim clicking it, the server echoing the payload, and the browser executing scripts in the page.

Practice identifying common tools in a lab, then match each tool to its usage description and discard distractors. Look for commonality across host, network, and web applications to narrow matches.

Master the four-step sequence of using the Metasploit framework to select an exploit, choose a payload, start the console, and run the exploit on a target.

Analyze which line executes the attacker's command in a web shell; line five uses shell_exec to run the cmd from the get request's code parameter and stores the result.

Master the reporting and communication plan for pen testing. Learn the pen test report structure, spot errors, describe common findings and remediations, and coordinate post-engagement activities for diverse audiences.

Develop a robust communication plan for pen tests, defining structure, timing, and triggers to keep client and teams aligned, within scope, and ready to address issues.

Outline the five pen test report sections: title page and table of contents, executive summary, methodology, findings and remediation, and conclusion, and document actions during testing with screenshots for traceability.

Identify common pen-test findings such as shared local administrator credentials, weak or plaintext passwords, and the need for multifactor on critical resources, along with SQL injection and unnecessary open services.

Identify common findings and remediation for vulnerabilities like shared local administrator credentials, default passwords, and SQL injection, and apply remediation via desired state configuration and monitoring.

Discover key post engagement steps after a penetration test, including cleanup, formal acceptance, lessons learned, retesting, and attestation of findings.

Explore the structure of a penetration test report, identify mismatched descriptions across sections like title page, executive summary, methodology, findings, remediation, and conclusion.

Document the finding of shared local administrator accounts with identical passwords across two workstations, revealed by cracking SAM files during a Windows penetration test.

Explore recommendations for reporting in a penetration test, addressing weak passwords, focusing on multi-factor authentication and correctly matching something you know, something you have, and something you are.

Identify findings and recommendations in a pen testing context, highlighting that SQL injection is mispaired with output encoding, unlike correct pairings such as plaintext passwords with a one-way hash.

Remove any persisted cross-site scripting attacks stored in a database during post engagement cleanup to ensure no residual artifacts remain after a penetration test.

Develop skills to read code and identify language and function across Python, Bash, PowerShell, and Ruby, and master five core areas of scripting, structures, loops, comparisons, and security testing tools.

Explore language characteristics of Bash, shell, PowerShell, Python, and Ruby, including how to run scripts, extensions, and execution policies, plus basic input/output and variable operations.

Explore how Bash and PowerShell compare values with operators like equal, not equal, less than, greater than, and greater than or equal, alongside Ruby and Python groupings for exams.

Identify and analyze conditional testing across Ruby, Bash, PowerShell, and Python; learn how if statements, end or finish markers, and code blocks reveal language and drive decision paths.

Learn to identify scripting languages and master for and while loops across Bash, Python, Ruby, and PowerShell, using end, done, braces, and colons as cues.

Explore script structure by examining PowerShell and Python examples, building a port scanner with a for-each loop and TCP client, and a Python server listener using sockets.

This lecture explains script execution and how chmod +x hello.sh marks a file as executable in Linux. It contrasts running scripts on Linux and PowerShell, highlighting exam topics for PenTest+.

Match scripting languages to code snippets by recognizing language tells in Bash, Python, PowerShell, and Ruby, using familiar cues like echo, print, and puts to predict output.

Match Ruby comparison operators to their symbolic representations, learning equality, less than, not equal to, and greater than or equal to through a memorization-based, two-column practice.

Analyze a code snippet to identify its language as Python and its function, which returns the hostname for each IP address in the 192.168.0 range.

Identify the right tool for the right job by distinguishing static source code analysis tools from dynamic testing, and recognizing tools like SonarQube and OWASP ZAP.

Build a lab for PenTest+ exam prep using hardware, virtual machines, or a hybrid with VirtualBox. Practice on Web Security Dojo to learn web attacks in a controlled, low-security environment.

Schedule the test at your peak alertness, rest well, and avoid distractions. Read questions carefully, use elimination, track answers, and aim for an 80% passing score on two passes.

Anticipate exam questions by mastering the five domains: planning and scoping, information gathering, vulnerability scanning, attacks and exploits, and reporting, along with hands-on tool practice and code analysis.