Contact Us
Cybersecurity

CompTIA PenTest+

Group Training

Overview

CompTIA® PenTest+® (Exam PT0-001) is the only penetration testing exam taken at a Pearson VUE testing center with both hands-on, performance-based questions and multiple-choice, to ensure each candidate possesses the skills, knowledge, and ability to perform tasks on systems. PenTest+ also includes management skills used to plan, scope, and manage weaknesses, not just exploit them.

PenTest+ is unique because it requires a candidate to demonstrate the hands-on ability and knowledge to test devices in new environments such as the cloud and mobile, in addition to traditional desktops and servers. The course provides the most up-to-date penetration testing, and vulnerability assessment and management skills necessary to determine the resiliency of the network against attacks.

Successful candidates will have the intermediate skills required to customize assessment frameworks to effectively collaborate on and report findings. They will also have the best practices to communicate recommended strategies to improve the overall state of IT security.

This course includes a voucher for the CompTIA Pentest+ Exam.

 

What's Included

  • This course includes:
    • 5 Full Days of Instructor Led CompTIA Authorized Training
      • CertMaster Learn (12 month access)
      • CertMaster Labs (12 month access)
      • CertMaster Practice (12 month access)
      • CompTIA Authorized PenTest+ eBook (Unlimited Access)
      • PenTest+ Instructor Slides
      • Office hours with certified CompTIA Instructors
      • Detailed Reporting on Course Progress and Exam Readiness
      • 1 Exam Voucher (Valid for 12 months)
    • Free Repeat for 12 months
    • Certificate of Completion for up to 40 CEUs/CPEs

Who Should Take This Course

Audience

This course is targeted toward the information technology (IT) professional who has networking and administrative skills in Windows®-based Transmission Control Protocol/Internet Protocol (TCP/IP) networks and familiarity with other operating systems, such as Mac OS® X, Unix, or Linux, and who wants to further a career in IT by acquiring a foundational knowledge of security topics; prepare for the CompTIA PenTest+ Certification examination; or use PenTest+ as the foundation for further advanced security certifications or career roles.

Prerequisites

Students should have CompTIA Network+ and Security+ certifications, or have equivalent knowledge / experience. Recommend minimum of 3-4 years of hands-on information security or related experience. PenTest+ has a technical, hands-on focus and is intended to follow CompTIA Security+ or equivalent experience.

Funding Options

Air Force COOL

This course is approved for Air Force COOL for active duty service members. Contact us for pricing information and quotes.

Army Credentialing Assistance

This course is approved for Army Credentialing Assistance for active duty service members. Contact us for pricing information and quotes.

Course Objectives

Upon completion of this course, the student will be able to:

  • Explain the importance of planning and key aspects of compliance-based assessments
  • Gather information to prepare for exploitation
  • Perform a vulnerability scan and analyze results
  • Exploit network, wireless, application, and RF-based vulnerabilities
  • Summarize physical security attacks
  • Perform post-exploitation techniques
  • Conduct information gathering with various tools and perform analysis on their output
  • Analyze basic scripts in Bash, Python, Ruby, and PowerShell
  • Utilize report writing and handling best practices
  • Explain recommended mitigation strategies for discovered vulnerabilities

Course Outline

CompTIA PenTest+

Day 1: Planning and Scoping

  1. Overview
  2. Penetration testing methodology
  3. Planning a penetration test
  4. Rules of engagement
  5. Legal concepts
  6. Testing strategies
  7. White box support resources
  8. Types of assessments
  9. Threat actors
  10. Target selection
  11. Other scoping considerations

Day 2: Information Gathering and Vulnerability Identification

  1. Information gathering
  2. Reconnaissance with CentralOps
  3. Scanning and enumeration
  4. Fingerprinting
  5. Cryptographic inspection
  6. Eavesdropping
  7. Decompiling and debugging
  8. Open source research
  9. Vulnerability scanning
  10. Scanning considerations
  11. Application and container scans
  12. Analyzing vulnerability scans
  13. Leverage information for exploit
  14. Common attack vectors
  15. Weaknesses in specialized systems

Day 3: Attacks and Exploits

  1. Social engineering
  2. Motivation factors
  3. Physical security attacks
  4. Lock picking
  5. Network-based vulnerabilities
  6. Wireless-based vulnerabilities
  7. Wireless network attack
  8. Application-based vulnerabilities
  9. Local host vulnerabilities
  10. Privilege escalation (Linux)
  11. Privilege escalation (Windows)
  12. Lateral movement
  13. Persistence
  14. Covering your tracks
  15. Persistence and covering tracks

Day 4: Penetration Testing Tools

  1. Nmap Usage
  2. Use Cases for Tools
  3. Scanners
  4. Credential Testing Tools
  5. Password Cracking
  6. Debuggers
  7. Software Assurance
  8. OSINT
  9. Wireless
  10. Web Proxies
  11. Social Engineering Tools
  12. Remote Access Tools
  13. Networking Tools
  14. Mobile Tools
  15. Miscellaneous Tools
  16. Intro to Programming
  17. Programming Concepts
  18. BASH Script Example
  19. Python Script Example
  20. PowerShell Script Example
  21. Ruby Script Example

Day 5: Reporting and Communication

    1. Pentest Communications
    2. Report Writing
    3. Mitigation Strategies
    4. Post-Report Activities
    5. Pentest Report Example
Search UMBC Training Centers