CompTIA PenTest+ Training

Course Duration

5 Days

Audience

Employees of federal, state and local governments; and businesses working with the government.

Prerequisites

To ensure your success in this course, you should have intermediate knowledge of information security concepts including identity and access management, cryptography, networking, and common security technologies. Practical experience securing various computing environments, including small-to-medium business and enterprise settings, is also recommended.

Course Description

The CompTIA PenTest+ course prepares students to plan and carry out penetration testing engagements from start to finish. Students learn to scope and negotiate engagements, perform reconnaissance, scan and enumerate targets, exploit vulnerabilities across network, wireless, application, and operating system layers, and use post-exploitation techniques including lateral movement and persistence. The course also covers how to analyze findings, develop remediation recommendations, and produce professional pentest reports. PenTest+ maps to DoD 8140/8570 requirements and is recognized across government and industry as a vendor-neutral penetration testing credential.

Learning Objectives

• After completing this course, you will be able to plan, conduct, analyze, and report on penetration tests, including the ability to…
• Plan and scope penetration tests
• Conduct passive reconnaissance
• Perform non-technical tests to gather information
• Conductive active reconnaissance
• Analyze vulnerabilities
• Penetrate networks
• Exploit host-based vulnerabilities
• Test applications Complete post-exploit tasks
• Analyze and report pen test results

Course Outline

• Introduction to Penetration Testing Concepts
• Plan a Pen Test Engagement
• Scope and Negotiate a Pen Test Engagement
• Prepare for a Pen Test Engagement
• Gather Background Information
• Prepare Background Findings for Next Steps
• Perform Social Engineering Tests
• Perform Physical Security Tests on Facilities
• Scan Networks
• Enumerate Targets
• Scan for Vulnerabilities
• Analyze Basic Scripts
• Analyze Vulnerability Scan Results
• Leverage Information to Prepare for Exploitation
• Exploit Network-Based Vulnerabilities
• Exploit Wireless and RF-Based Vulnerabilities
• Exploit Specialized Systems
• Exploit Windows-Based Vulnerabilities
• Exploit *nix-Based Vulnerabilities
• Exploit Web Application Vulnerabilities
• Test Source Code and Compiled Apps
• Use Lateral Movement Techniques
• Use Persistence Techniques
• Use Anti-Forensics Techniques
• Analyze Pen Test Data
• Develop Recommendations for Mitigation Strategies
• Write and Handle Reports
• Conduct Post-Report-Delivery Activities

Frequently Asked Questions