PT0-002 Real Exam Questions
CompTIA PenTest+ (PT0-002) Certification Exam. Everything you need to prepare, practice, and pass.
593
Questions
9
Exam Domains
Included
Explanations
Ready to practice?
593+ questions with detailed explanations
Start NowFrom $49.99 USD · refund policy applies
Browse all 593 PT0-002 questions
Certification Overview
The exam spans the complete penetration testing workflow: planning engagements and defining scope, performing reconnaissance and vulnerability scanning using industry tools, conducting attacks and exploits, executing post-exploitation and lateral movement, and delivering professional reports. Strong emphasis on practical tool usage (Nmap, vulnerability scanners, exploitation frameworks) and understanding how each phase feeds into the next.
What This Certification Proves
CompTIA PenTest+ validates your ability to conduct authorized penetration tests, from initial engagement through exploitation and reporting. This certification proves you can execute real-world security assessments across the full attack lifecycle—making you immediately job-ready for offensive security roles.
Who Should Take This Exam
Security professionals with hands-on experience seeking to specialize in penetration testing; ethical hackers transitioning to authorized security work; security testers looking to formalize their skills and advance career prospects; junior penetration testers aiming for CompTIA-recognized credentials.
Topic Breakdown
9 domains covering 593 questions
| Domain | Questions | Weight |
|---|---|---|
| Attacks And Exploits | 145 | 24% |
| Information Gathering And Vulnerability Scanning | 83 | 14% |
| Reconnaissance And Enumeration | 68 | 11% |
| Post-Exploitation And Lateral Movement | 58 | 10% |
| Reporting And Communication | 54 | 9% |
| Planning And Scoping | 51 | 9% |
| Vulnerability Discovery And Analysis | 51 | 9% |
| Engagement Management | 45 | 8% |
| Tools And Code Analysis | 38 | 6% |
Study Plans
Choose a study plan that matches your schedule and experience level
30 Days
Intensive Sprint
Week 1-2
- Master fundamentals: Attacks And Exploits
- Read CompTIA official documentation
- Complete 20 questions daily
Week 3
- Deep dive: Information Gathering And Vulnerability Scanning
- Review weak areas from results
- Take 2 full-length exams
Week 4
- Review all flagged questions
- Timed exams to build stamina
- Final revision of key concepts
60 Days
Balanced Approach
Week 1-2
- Survey all exam domains
- Set up study environment
- Begin with foundational topics
Week 3-4
- Focus: Attacks And Exploits
- Focus: Information Gathering And Vulnerability Scanning
- 10 questions daily
Week 5-6
- Focus: Reconnaissance And Enumeration
- Hands-on labs if applicable
- Review explanations for wrong answers
Week 7-8
- Complete all 593 questions
- Identify and eliminate weak areas
- Take 3 full-length timed tests
90 Days
Comprehensive Study
Month 1
- Learn all exam domains at a comfortable pace
- Build strong foundational knowledge
- 7 questions daily
Month 2
- Deep dive into each domain
- Hands-on practice and labs
- Take weekly timed exams
Month 3
- Work through all 593 questions
- Identify and eliminate weak areas
- Take 3 full-length timed exams
PT0-002-Specific Tips
- Master the reconnaissance toolchain (Nmap, OSINT techniques) thoroughly—these directly appear on the exam and form the foundation for vulnerability discovery
- Practice exploitation labs hands-on in dedicated environments (HackTheBox, DVWA, Metasploit); the exam tests application of tools, not just theory
- Study the full engagement lifecycle (planning/scoping → enumeration → exploitation → post-exploitation → reporting) as a connected workflow, not isolated domains
- Focus heavily on post-exploitation and lateral movement techniques since they represent a distinct exam domain and real-world complexity
- Create checklists for each domain (engagement management items, planning questions, enumeration sequences) to mirror real penetration test documentation
- Review common tools in depth (Nmap, Burp Suite, Metasploit, PowerShell Empire) rather than learning many tools superficially
- Practice report writing and communication skills—the exam includes reporting/communication as a domain and this is often overlooked in technical study
Relevant Career Roles
Sample Questions
Try 5 free questions from the PT0-002 question bank
A company hired a penetration tester to do a social-engineering test against its employees. Although the tester did not find any employees' phone numbers on the company's website, the tester has learned the complete phone catalog was published there a few months ago. In which of the following places should the penetration tester look FIRST for the employees' numbers?
A tester who is performing a penetration test discovers an older firewall that is known to have serious vulnerabilities to remote attacks but is not part of the original list of IP addresses for the engagement. Which of the following is the BEST option for the tester to take?
A penetration tester is conducting an assessment on 192.168.1.112. Given the following output: Which of the following is the penetration tester conducting?
A penetration tester is doing an assessment for a company that requires an external command- and-control server. The command-and-control tool should be able to use multiple types of payloads (PowerShell, SMB, and binaries) and centralize the management of compromised systems. Which of the following tools should the tester use?
While performing reconnaissance, a penetration tester runs Nmap and receives the following output: Nmap scan report for samplescan.org (44.33.55.66) Host is up (0.025s latency). Not shown: 992 closed tcp ports (conn-refused) PORT STATE 22/tcp open 23/tcp open 80/tcp open 443/tcp open Nmap done: 1 IP address (1 host up) scanned in 5.52 seconds Which of the following ports should the penetration tester sniff the traffic on to obtain sensitive information?
Related Certifications
Other CompTIA certifications you might be interested in
SY0-701
CompTIA Security+ SY0-701 Certification Exam
From $49.99
SY0-501
CompTIA SY0-501
From $49.99
N10-009
CompTIA Network+ N10-009 Certification Exam
From $49.99
220-1101
CompTIA A+ 220-1101 (Core 1) Exam
From $49.99
220-1102
CompTIA A+ 220-1102 (Core 2) Exam
From $49.99
CS0-003
CompTIA Cybersecurity Analyst (CySA+) Exam
From $49.99
PT0-002 FAQ
Ready to pass PT0-002?
Join thousands of professionals who passed their certification exam with NerdExam.
Get PT0-002 Exam Questions