TOTAL: CompTIA PenTest+ (PT0-003) Course (Udemy.com)

Mike Meyers and the Total Seminars Team, your source for best-selling cybersecurity courses, brings you this ethical hacking and penetration testing course with your instructor Michael Solomon, Ph.D., CISSP, PMP, CISM. Prepare for the CompTIA PenTest+ PT0-003 exam.

This is NOT a boring voice over PowerPoint course. Michael speaks to you and presents the material in an engaging interactive style that will keep you interested and make it easier to understand. Check out the free sample lectures and you will see the difference.

We've added a bonus Practice Test that covers the CompTIA PenTest+ certification exam. Test your readiness to pass industry ethical hacking certification exams.

With 30+ years of experience in security, privacy, blockchain, and data science, and an energetic presentation style, Michael takes his proficiency in network penetration testing and consolidates it into this informative and engaging course.

WHY SHOULD I TAKE THIS COURSE?

Did you know penetration testers' average salary is 71,929?* And this career is in one of the fastest-growing job markets.

Whether you're looking to pass the CompTIA PenTest+ certification exam, take your next step in the CompTIA Cybersecurity Pathway, or you're just looking to learn some awesome ethical hacking skills, you’re in the right place.

Keep in mind there's much more to being an ethical hacker than what's covered here, including how to secure a network, however this course focuses on how to be a pen tester. A pen tester plans and scopes a pen test engagement with a client, finds vulnerabilities, exploits them to get into a network, then reports on those findings to the client.

This course shows you how to:

• Use the tools you’ll need to scan networks, crack passwords, analyze and intercept traffic, discover code vulnerabilities, and compromise resources

• Recognize vulnerabilities within a system, run exploits, and suggest solutions to a client to remediate the weak points

• Work within a virtual environment to practice your pen testing skills, including using Oracle VM manager, Kali Linux, Metasploitable, and DVWA

• Scope, plan, and execute a pen test engagement from start to finish

WHAT'S COVERED?

PenTest+ Exam Domain  -  Percentage of Exam

Engagement management (13%)

• Planning and scoping: defining rules of engagement, testing windows, and target selection.

• Legal and ethical compliance: ensuring authorization letters, mandatory reporting, and adherence to regulations.

• Collaboration and communication: aligning with stakeholders through peer reviews, escalation paths, and risk articulation.

• Penetration test reports: creating reports with executive summaries, findings, and remediation recommendations.

Reconnaissance and enumeration (21%)

• Active and passive reconnaissance: gathering information using open-source intelligence (OSINT), network sniffing, and protocol scanning.

• Enumeration techniques: performing DNS enumeration, service discovery, and directory enumeration.

• Reconnaissance tools: using tools like Nmap, Wireshark, and Shodan for information gathering.

• Script modification: customizing Python, PowerShell, and Bash scripts for reconnaissance and enumeration.

Vulnerability discovery and analysis (17%)

• Vulnerability scans: conducting authenticated, unauthenticated, static application security testing (SAST) and dynamic application security testing (DAST).

• Result analysis: validating findings, troubleshooting configurations, and identifying false positives.

• Discovery tools: using tools like Nessus, Nikto, and OpenVAS for vulnerability discovery.

Attacks and exploits (35%)

• Network attacks: performing VLAN hopping, on-path attacks, and service exploitation.

• Authentication attacks: executing brute-force attacks, pass-the-hash, and credential stuffing.

• Host-based attacks: conducting privilege escalation, process injection, and credential dumping.

• Web application attacks: performing SQL injection, cross-site scripting (XSS), and directory traversal.

• Cloud-based attacks: exploiting container escapes, metadata service attacks, and identity and access management (IAM) misconfiguration.

• AI attacks: explaining prompt injection and model manipulation against artificial intelligence systems.

Post-exploitation and lateral movement (14%)

• Post-exploitation activities: establishing persistence, performing lateral movement, and cleaning up artifacts.

• Documentation: creating attack narratives and providing remediation recommendations.

EXAM INFO

Exam code: PT0-003

Max. 90 questions (performance-based and multiple choice)

Length of exam: 165 minutes

Passing score: 750 (on a scale of 100-900)

Recommended experience: Network+, Security+ or equivalent knowledge. Minimum of 3-4 years of hands-on information security or related experience. While there is no required prerequisite, PenTest+ is intended to follow CompTIA Security+ or equivalent experience and has a technical, hands-on focus.

HOW DO I TAKE THE COMPTIA PENTEST+ EXAM?

Buy an exam voucher (get your discount voucher at Total Seminars' website), schedule your exam on the Pearson VUE website, then take the exam at a qualifying Pearson VUE testing center.

WHAT'S THE BIG DEAL ABOUT THE COMPTIA PENTEST+, ANYWAY?

CompTIA's PenTest+ is the only penetration testing exam taken at a Pearson VUE testing center or online, with both hands-on, performance-based questions and multiple-choice, to ensure each candidate possesses the skills, knowledge, and ability to perform tasks on systems.

Penetration testing and information security is one of the fastest-growing job categories according to the U.S. Bureau of Labor Statistics. It predicts that roles requiring these skills will see 28 percent overall growth by 2026.