CompTIA PT0-002 Exam Syllabus Topics:
| Topic | Details |
|---|---|
Planning and Scoping - 15% | |
| Explain the importance of planning for an engagement. | - Understanding the target audience - Rules of engagement - Communication escalation path - Resources and requirements
- Budget
- Technical constraints
|
| Explain key legal concepts. | - Contracts
- Environmental differences
- Written authorization
|
| Explain the importance of scoping an engagement properly. | - Types of assessment
- Special scoping considerations
- Target selection
- Strategy
- Risk acceptance
|
| Explain the key aspects of compliance-based assessments. | - Compliance-based assessments, limitations and caveats
- Clearly defined objectives based on regulations |
Information Gathering and Vulnerability Identification - 22% | |
| Given a scenario, conduct information gathering using appropriate techniques. | - Scanning - Enumeration
- Packet crafting
- Eavesdropping
- Decompilation
|
| Given a scenario, perform a vulnerability scan. | - Credentialed vs. non-credentialed - Types of scans
- Container security
- Considerations of vulnerability scanning
|
| Given a scenario, analyze vulnerability scan results. | - Asset categorization - Adjudication
- Prioritization of vulnerabilities
|
| Explain the process of leveraging information to prepare for exploitation. | - Map vulnerabilities to potential exploits - Prioritize activities in preparation for penetration test - Describe common techniques to complete attack
|
| Explain weaknesses related to specialized systems. | - ICS - SCADA - Mobile - IoT - Embedded - Point-of-sale system - Biometrics - Application containers - RTOS |
Attacks and Exploits - 30% | |
| Compare and contrast social engineering attacks. | - Phishing
- Elicitation
- Interrogation
|
| Given a scenario, exploit network-based vulnerabilities. | - Name resolution exploits
- SMB exploits
- DoS/stress test |
| Given a scenario, exploit wireless and RF-based vulnerabilities. | - Evil twin
- Deauthentication attacks |
| Given a scenario, exploit application-based vulnerabilities. | - Injections
- Authentication
- Authorization
- Cross-site scripting (XSS)
- Cross-site request forgery (CSRF/XSRF)
- File inclusion
- Unsecure code practices
|
| Given a scenario, exploit local host vulnerabilities. | - OS vulnerabilities
- Unsecure service and protocol configurations
- Default account settings
- Physical device security
|
| Summarize physical security attacks related to facilities. | - Piggybacking/tailgating - Fence jumping - Dumpster diving - Lock picking - Lock bypass - Egress sensor - Badge cloning |
| Given a scenario, perform post-exploitation techniques. | - Lateral movement
- Persistence
- Covering your tracks |
Penetration Testing Tools - 17% | |
| Given a scenario, use Nmap to conduct information gathering exercises. | - SYN scan (-sS) vs. full connect scan (-sT) - Port selection (-p) - Service identification (-sV) - OS fingerprinting (-O) - Disabling ping (-Pn) - Target input file (-iL) - Timing (-T) - Output parameters
|
| Compare and contrast various use cases of tools. | - Use cases
- Tools
|
| Given a scenario, analyze tool output or data related to a penetration test. | - Password cracking - Pass the hash - Setting up a bind shell - Getting a reverse shell - Proxying a connection - Uploading a web shell - Injections |
| Given a scenario, analyze a basic script (limited to Bash, Python, Ruby, and PowerShell). | - Logic
- I/O
- Substitutions
- Error handling |
Reporting and Communication - 16% | |
| Given a scenario, use report writing and handling best practices. | - Normalization of data - Written report of findings and remediation
- Risk appetite |
| Explain post-report delivery activities. | - Post-engagement cleanup
- Client acceptance |
| Given a scenario, recommend mitigation strategies for discovered vulnerabilities. | - Solutions
- Findings
- Remediation
|
| Explain the importance of communication during the penetration testing process. | - Communication path - Communication triggers
- Reasons for communication
- Goal reprioritization |
Reference: https://www.comptia.org/certifications/pentest
Many people know getting CompTIA certification is very useful for their career but they fear failure because they hear it is difficult. Now I advise you to purchase our PT0-002 premium VCE file. If you are not sure you can download our PT0-002 VCE file free for reference. Please trust me if you pay attention on our PT0-002 dumps VCE pdf you will not fail. We can guarantee you pass PT0-002 exam 100%.
Why do we have this confidence to say that we are the best for PT0-002 exam and we make sure you pass exam 100%? Because our premium VCE file has 80%-90% similarity with the real CompTIA PT0-002 questions and answers. Once you finish our PT0-002 dumps VCE pdf and master its key knowledge you will pass PT0-002 exam easily. If you can recite all PT0-002 dumps questions and answers you will get a very high score. Our standard is that No Help, Full Refund. No pass, No pay.
Instant Download: Our system will send you the PT0-002 braindumps file you purchase in mailbox in a minute after payment. (If not received within 12 hours, please contact us. Note: don't forget to check your spam.)
The registration process of the CompTIA PT0-002 Certification Exam
The steps to get registered for the PT0-002 Certification Exam, explained in the PT0-002 Dumps are as follows:
You will be redirected to the CompTIA's official website, click on the link of the PT0-002 Certification Exam.
After paying the exam fee, you will receive a confirmation message from the CompTIA. CompTIA PT0-002 Certification Exam is being delivered by the Pearson VUE. You can take it either online or onsite.
Now, you will be redirected to the registration page of the PT0-002 exam, fill in the required details and click on the submit button.
Enter the required details in the given fields of the CompTIA website, and After filling in all the required details, click on the submit button.
Go to the official website of the CompTIA and click on the link to the PT0-002 Certification Exam.
Renee 
Yedda 
Doris 
Regan 
Zona 
Atwood 
Bert 
Lyndon 
Marguerite 
Gale 
Marsh 
Byron 
Harvey 
Otto 
