PenTest+ practice.
Build confidence.
Build your penetration testing knowledge with focused practice. Review each explanation, revisit weak spots, and prepare with purpose.
Published by PrepForCerts · Editorial responsibility and sources
Free CompTIA PenTest+ Practice Test 2026
Master penetration testing with our current PenTest+ exam practice questions. Covering planning, reconnaissance, attacks, exploits, and professional reporting—the complete skill set for ethical hackers and security professionals.
PenTest+: plan your preparation
Prepare for CompTIA PenTest+ with practical questions covering penetration testing methodologies, vulnerability assessment, and security reporting.
The CompTIA PenTest+ certification validates hands-on penetration testing skills and vulnerability assessment techniques. This intermediate-level certification focuses on practical penetration testing methodology and the ability to conduct assessments using appropriate tools and techniques. PenTest+ professionals can plan and scope penetration tests, conduct passive and active reconnaissance, identify vulnerabilities, and provide actionable remediation guidance. Unlike purely theoretical certifications, PenTest+ includes performance-based questions that simulate real-world penetration testing scenarios. Our practice questions cover penetration testing phases from planning to reporting, including web application testing, network assessments, and wireless security testing.
Exam version and format
The current PenTest+ exam is PT0-003: up to 90 questions in 165 minutes, with a passing score of 750/900. Reporting and tool skills remain useful, but the current outline groups them differently.
Checked September 8, 2026. Read the official PenTest+ exam guidance before booking.
Current exam outline
- Engagement Management: 13%
- Reconnaissance and Enumeration: 21%
- Vulnerability Discovery and Analysis: 17%
- Attacks and Exploits: 35%
- Post-exploitation and Lateral Movement: 14%
PenTest+ Exam Quick Facts
| Exam Code | Latest version |
| Full Name | CompTIA PenTest+ |
| Number of Questions | Up to 90 (MCQ + PBQ) |
| Exam Duration | 165 minutes |
| Passing Score | 750 (on 100-900 scale) |
| Exam Cost | Check current provider pricing |
| Validity Period | 3 years |
| Renewal | 60 CEUs or an eligible renewal route |
| Prerequisites | None (Security+ and 3-4 years recommended) |
| DoD role requirements | Check the current 8140 matrix and employer requirements |
| Average Salary | Varies by role, location, and experience |
PenTest+ Practice Topics
The PenTest+ exam tests five core domains covering the complete penetration testing lifecycle. Master each domain to excel on the exam.
📋 Planning & Scoping
Topics: Rules of engagement, scoping documents, legal considerations, compliance requirements, communication with stakeholders.
Key Concepts: NDA, SOW, ROE, authorization, compliance frameworks
🔍 Information Gathering
Topics: Passive and active reconnaissance, OSINT, scanning, enumeration, vulnerability identification.
Key Tools: Nmap, Shodan, theHarvester, Recon-ng, Maltego
💥 Attacks & Exploits
Topics: Network attacks, wireless attacks, web application attacks, cloud attacks, social engineering, physical security.
Key Tools: Metasploit, SQLmap, Burp Suite, Hydra, BeEF
📝 Reporting & Communication
Topics: Report writing, findings prioritization, remediation recommendations, executive summaries, technical details.
Key Concepts: CVSS scoring, risk ratings, business impact, remediation
🛠️ Tools & Code Analysis
Topics: Scripting basics (Bash, Python, PowerShell), code review, tool output analysis, automation.
Key Skills: Script modification, output interpretation, exploit code review
Ready to Master Penetration Testing?
Practice with questions designed by security professionals covering the current PenTest+ exam domains.
Start Practice Test →Essential Tools for PenTest+ Exam
The PenTest+ exam tests your knowledge of common penetration testing tools. You should understand their purpose, basic usage, and output interpretation.
🔍 Nmap
Network scanner for host discovery, port scanning, service detection, and OS fingerprinting. Know scan types (-sS, -sT, -sU), NSE scripts, and output formats.
💣 Metasploit Framework
Exploitation framework for finding vulnerabilities and deploying payloads. Understand msfconsole, exploit modules, payloads, and Meterpreter sessions.
🌐 Burp Suite
Web application testing proxy for intercepting requests, fuzzing parameters, and finding vulnerabilities like XSS, CSRF, and injection flaws.
💉 SQLmap
Automated SQL injection tool for detecting and exploiting SQL injection vulnerabilities. Know common flags and database extraction techniques.
🔑 Hashcat/John
Password cracking tools for offline attacks. Understand hash types, wordlist attacks, rule-based attacks, and rainbow tables.
📶 Aircrack-ng
Wireless security suite for WEP/WPA/WPA2 testing. Know handshake capture, deauthentication attacks, and dictionary attacks.
Sample PenTest+ Practice Question
Question: During a penetration test, you discover a web application vulnerable to SQL injection. The client's rules of engagement specify that no data extraction is permitted. What is the MOST appropriate next step?
A) Extract a sample of data to prove the vulnerability exists
B) Document the vulnerability and include it in the report
C) Exploit the vulnerability to gain shell access
D) Ignore the finding since you cannot fully exploit it
Show Answer
✓ B) Document the vulnerability and include it in the report
The rules of engagement (ROE) are legally binding. Even though you cannot extract data, you must document the finding as it represents a critical security risk. Include proof of concept (like error messages or UNION-based detection), potential impact, and remediation recommendations. Never exceed the scope defined in the ROE.
PenTest+ vs Other Penetration Testing Certifications
| Aspect | PenTest+ | CEH | OSCP |
|---|---|---|---|
| Vendor | CompTIA | EC-Council | Offensive Security |
| Exam Format | MCQ + PBQ | Multiple-choice only | 24-hour hands-on |
| Duration | 165 minutes | 4 hours | 24 hours + report |
| Difficulty | Intermediate | Intermediate | Advanced |
| Cost | Check current provider pricing | Check current provider pricing | Check current provider pricing |
| DoD role requirements | Check the current 8140 matrix and employer requirements | Check the current 8140 matrix and employer requirements | Check the current 8140 matrix and employer requirements |
| Best For | Practical + affordable | HR recognition | Senior pentest roles |
| Report Writing | Heavily tested | Not tested | Required |
Penetration Testing Practice
Review cloud attacks and penetration testing techniques in concept questions, then practice them in an authorized lab.
Attack Scenarios
Practice with realistic penetration testing scenarios that mirror actual engagement challenges.
Tool Knowledge
Learn essential pen testing tools like Nmap, Metasploit, Burp Suite, and exploitation frameworks.
Report Writing Focus
Understand how to document findings professionally. Reporting skills span the current engagement and post-exploitation topics.
Career Opportunities with PenTest+
Career paths to explore: PenTest+ skills can support preparation for these security roles:
🎯 Penetration Tester
Salary: varies by role, location, and experience
Conduct authorized security assessments, identify vulnerabilities, and provide remediation guidance to clients.
🔐 Security Consultant
Salary: varies by role, location, and experience
Advise organizations on security posture, perform assessments, and recommend security improvements.
🛡️ Vulnerability Analyst
Salary: varies by role, location, and experience
Identify and prioritize vulnerabilities, coordinate remediation, and track security metrics.
🔴 Red Team Operator
Salary: varies by role, location, and experience
Simulate advanced adversaries. PenTest+ provides foundation; pursue OSCP/OSEP for senior red team roles.
Who should study PenTest+?
- Security+ certified professionals ready to advance into hands-on penetration testing and vulnerability assessment roles
- Junior penetration testers who need a vendor-neutral certification to validate their practical offensive security skills
- Security analysts and SOC team members who want to understand how attackers operate to improve defensive capabilities
- IT professionals transitioning into offensive security who want a stepping stone before pursuing OSCP
- Compliance and audit professionals who need to understand penetration testing methodology and reporting standards
Build your PenTest+ study plan
- Practice attacks and exploits in an authorized lab using tools such as Metasploit, Burp Suite, and SQLMap. This area represents 35% of PT0-003.
- Set up a vulnerable lab using Metasploitable 2, DVWA, and OWASP WebGoat to practice web application and network attacks safely.
- Practice report writing: document findings, prioritize remediation, and explain business impact. Reporting skills span the current engagement and post-exploitation topics.
- Study the penetration testing methodology phases: Planning → Reconnaissance → Scanning → Exploitation → Post-Exploitation → Reporting — questions follow this flow.
- Practice with performance-based questions — PenTest+ includes hands-on questions where you analyze scan results, write scripts, or identify vulnerabilities in code.
Skills to review
- Planning and Scoping
- Compare governance and compliance, explain scoping and organizational requirements, and demonstrate ethical hacking mindset.
- Information Gathering and Vulnerability Scanning
- Perform passive and active reconnaissance, conduct vulnerability scans, and analyze scan output results.
- Attacks and Exploits
- Research and exploit network, wireless, application, cloud, and specialized system vulnerabilities.
- Reporting and Communication
- Compile findings, recommend remediation, write reports, and communicate results to technical and non-technical stakeholders.
- Tools and Code Analysis
- Use penetration testing tools, analyze scripts and code samples, and explain use cases for various exploitation tools.
Try these PenTest+ knowledge questions
Choose your answer, then review the explanation. These are independent learning examples, not official exam questions or a replacement for hands-on labs.
Frequently Asked Questions
What is the PenTest+ exam format?
The PenTest+ exam has up to 90 questions including multiple-choice and performance-based questions. You have 165 minutes to complete it. The passing score is 750 on a scale of 100-900. PBQs typically appear at the beginning and may include scenarios where you analyze tool output or simulate attack steps.
What are the prerequisites for PenTest+?
CompTIA recommends Network+, Security+, or equivalent knowledge plus 3-4 years of hands-on penetration testing experience. However, there are no mandatory prerequisites—you can take the exam if you feel prepared. Many candidates pursue Security+ first.
What domains does PenTest+ cover?
Engagement Management (13%); Reconnaissance and Enumeration (21%); Vulnerability Discovery and Analysis (17%); Attacks and Exploits (35%); Post-exploitation and Lateral Movement (14%)
How does PenTest+ compare to CEH?
PenTest+ combines multiple-choice and performance-based questions. CEH has a knowledge exam and a separate Practical assessment. Compare the exam format, objectives, total price, and roles you want.
How does PenTest+ compare to OSCP?
PenTest+ tests knowledge and performance-based scenarios. OSCP uses a hands-on penetration testing assessment. Use each provider’s current exam guide and practice in authorized labs when choosing your preparation path.
How much does PenTest+ cost?
Check the official PenTest+ page for current exam pricing in your region. Budget separately for training, lab access, taxes, and any retake. Package prices vary.
How long is PenTest+ certification valid?
PenTest+ certification is valid for 3 years. You can renew through CompTIA's Continuing Education program by earning 60 CEUs or by passing a higher-level certification like CASP+.
Is PenTest+ DoD 8570 approved?
Check the current DoD 8140 qualification matrix for your intended work role and proficiency level. Do not assume a credential satisfies every employer or defense role.
Do I need Security+ before PenTest+?
While not required, Security+ provides a good foundation in security fundamentals. However, many candidates with networking and security experience can directly pursue PenTest+ if they have hands-on technical skills.
What tools should I know for PenTest+?
Key tools include Nmap, Burp Suite, Metasploit, Wireshark, Nessus, OWASP ZAP, and various Linux command-line tools. The exam focuses more on methodology than specific tool usage.
Do I need an account to use these samples?
You can read these examples without an account. Create an account to save progress in Smart Practice. The Free plan includes 15 questions per day; see Pricing for current plan features.
Can I study PenTest+ on my phone?
This page works on a phone, tablet, or computer. Review the examples between longer study sessions. Use a suitable lab environment for hands-on configuration and troubleshooting.