CompTIA PT0-003 考試概覽:

認證廠商:	CompTIA
考試名稱:	CompTIA PenTest+ (PT0-003)
考試代碼:	PT0-003
考試費用:	USD 404
相關認證:	CompTIA CySA+ CompTIA Security+ CompTIA Network+
考試時間:	165 分鐘
證照有效期限:	3 年
考試形式:	多選題, 實作題（PBQs）, 單選題
及格分數:	750（滿分 100–900）
實際考試題數:	最多 85 道題目
支援語言:	English
推薦課程:	CompTIA CertMaster Learn PenTest+ CompTIA 官方訓練資源
考試報名:	CompTIA PenTest+ 官方頁面 Pearson VUE 考試報名
範例考題:	CompTIA PT0-003 範例考題
考試方式:	可透過 Pearson VUE 測試中心或線上遠距監考進行
必備條件:	無正式先決條件。建議具備：CompTIA Security+ 認證或等同知識，以及 3–4 年的資訊安全或滲透測試實務經驗。
官方大綱網址:	https://www.comptia.org/certifications/pentest

CompTIA PT0-003 考試大綱：

主題	簡介
主題 1	Post-exploitation and Lateral Movement: Cybersecurity analysts will gain skills in establishing and maintaining persistence within a system. This topic also covers lateral movement within an environment and introduces concepts of staging and exfiltration. Lastly, it highlights cleanup and restoration activities, ensuring analysts understand the post-exploitation phase’s responsibilities.
主題 2	Vulnerability Discovery and Analysis: In this section, cybersecurity analysts will learn various techniques to discover vulnerabilities. Analysts will also analyze data from reconnaissance, scanning, and enumeration phases to identify threats. Additionally, it covers physical security concepts, enabling analysts to understand security gaps beyond just the digital landscape.
主題 3	Attacks and Exploits: This extensive topic trains cybersecurity analysts to analyze data and prioritize attacks. Analysts will learn how to conduct network, authentication, host-based, web application, cloud, wireless, and social engineering attacks using appropriate tools. Understanding specialized systems and automating attacks with scripting will also be emphasized.
主題 4	Engagement Management: In this topic, cybersecurity analysts learn about pre-engagement activities, collaboration, and communication in a penetration testing environment. The topic covers testing frameworks, methodologies, and penetration test reports. It also explains how to analyze findings and recommend remediation effectively within reports, crucial for real-world testing scenarios.
主題 5	Reconnaissance and Enumeration: This topic focuses on applying information gathering and enumeration techniques. Cybersecurity analysts will learn how to modify scripts for reconnaissance and enumeration purposes. They will also understand which tools to use for these stages, essential for gathering crucial information before performing deeper penetration tests.