CompTIA PenTest+ Exam Guide
The **PenTest+** is for cybersecurity professionals tasked with penetration testing and vulnerability management. It validates hands-on skills to perform penetration tests across Cloud, Web, mobile, and networks.
Which phase of a penetration test involves gathering information about the target before an attack?
Answer : Reconnaissance (Footprinting).
Comprises passive (e.g., WHOIS) and active (e.g., port scanning) info collection.
What is a 'Reverse Shell'?
Answer : A technique where the target machine initiates a connection back to the attacker's machine.
Commonly used to bypass firewalls that block incoming connections.
Which tool is the industry standard for vulnerability exploitation?
Answer : Metasploit Framework.
Provides hundreds of exploits and payloads for testing system security vulnerabilities.
In penetration testing, what does 'Pivoting' mean?
Answer : Using a compromised machine to attack other systems on the same internal network.
Allows testers to advance deeper into a target's infrastructure.
Which type of penetration test provides the tester with no prior information about the target?
Answer : Black Box Testing.
Simulates the conditions of a real external attacker with no internal knowledge.
Related Certifications