Understand the certification
认证概述
CompTIA PenTest+（PT0-001）是 PT0-002 的前版本，两者通过后获得相同的 CompTIA PenTest+ 认证。PT0-001 验证你能够独立完成一次完整的渗透测试委托：从签署授权文件、划定测试范围，到用 Nmap 和 Metasploit 发现并利用漏洞，再到撰写面向管理层和技术团队的渗透测试报告。认证符合美国 DoD 8570/8140 IAT Level II 要求，在政府、国防和金融安全岗位有明确需求。题库中 187+ 题覆盖 PT0-001 真实考试场景，包括 Kali Linux 工具选择、Web 漏洞识别和 PTES 方法论应用。
考试领域
- 计划与范围界定（Planning and Scoping）— 15%：授权委托书（Rules of Engagement）起草、法律合规边界、被动侦察 vs 主动侦察的区别
- 信息收集与漏洞识别（Information Gathering and Vulnerability Identification）— 22%：Nmap 扫描技术（-sS/-sV/-O/-p）、Nessus 漏洞扫描结果解读、OSINT 信息收集（Shodan/Maltego）
- 攻击与渗透利用（Attacks and Exploits）— 30%：Metasploit 框架操作、Web 应用攻击（SQL 注入/XSS/CSRF）、密码破解（Hashcat/John the Ripper）、无线网络攻击
- 渗透测试工具（Penetration Testing Tools）— 17%：Burp Suite 拦截代理、Wireshark 流量分析、Netcat、工具选择判断题
- 报告与沟通（Reporting and Communication）— 16%：执行摘要（Executive Summary）写作、CVSS 漏洞评级、技术发现分级和修复建议
适合人群
持有 Security+ 或等同安全知识、有 3-4 年网络安全工作经验、准备进入渗透测试专业方向的安全工程师（Security Engineer）。
Exam at a glance
- Exam code
- PT0-001
- Provider
- CompTIA
- Format
- Single choice / Multiple select
- Language
- English
- Validity
- 3 years
- Exam fee
- $392
Skills in focus
Learning outcomes
- 获得 CompTIA PenTest+ 官方认证，满足 DoD 8570/8140 IAT Level II 要求
- 能够独立规划渗透测试范围：起草 Rules of Engagement、识别测试法律边界
- 掌握 Metasploit 完整攻击链：信息收集 → 漏洞利用 → 后渗透 → 权限维持
- 具备专业报告撰写能力：CVSS 评级、技术发现分级、面向管理层的执行摘要
- 为进阶考取 OSCP（Offensive Security 认证）建立理论方法论基础
Who this is for
- 持有 Security+ 或同等安全知识、3-4 年安全经验、准备专攻渗透测试方向的安全工程师
- 漏洞管理工程师（Vulnerability Management Engineer）希望扩展到主动攻击测试技能
- SOC 分析师（SOC Analyst）想理解攻击者视角以提升防御能力
- 政府/国防/金融行业需要 DoD 8570 认可渗透测试认证的安全人员
- 已持有 PT0-001 打算向更新的 PT0-002 版本知识升级的从业者
Before you start
- 建议先获得 CompTIA Security+（或具备同等安全基础知识）
- 3-4 年网络安全工作经验，熟悉 TCP/IP 协议栈和常见网络服务
- 熟悉 Kali Linux 或类似渗透测试发行版的基本命令行操作
- 了解 OWASP Top 10 Web 漏洞原理（SQL 注入、XSS、CSRF 等）
- 有 Metasploit 或 Burp Suite 基本使用经验更佳
Your learning path
Plan your preparation
- Learning hours
- 20h
- With relevant experience
- 4-6 weeks
- Starting from scratch
- 8-10 weeks
- Daily study
- 1-2h
Included in your preparation
- 覆盖攻击利用（30%）、信息收集（22%）、工具使用（17%）、报告沟通（16%）、计划范围（15%）五大考域
- 187+ 精选渗透测试场景题，涵盖 Metasploit 利用链、SQL 注入变体和 Nmap 输出解读
- 仿真模拟考试（85 题/165 分钟），及格线 750/900，包含 PBQ 实操场景模拟
- 错题本智能推送，重点强化攻击利用（最高权重 30%）和信息收集（22%）核心技术点
- 与最新版 PT0-002 核心知识高度重叠，一次备考兼顾新旧版本知识体系
Preparation tips
- 85 题 165 分钟，平均每题 2 分钟，合理分配时间
- 及格分 750/900，不确定的题先标记跳过，回头再做
- 排除法非常有用 — 先排掉明显错误的选项，剩下的再分析
- 多选题会告诉你选几个，仔细看题目要求
Common mistakes
- 没有读完所有选项就选答案 — 题目经常有"最佳"答案和"正确但不最佳"的干扰项
- 备考只刷题不理解原理 — 考试场景题需要理解底层概念
- 忽略时间管理 — 在难题上卡太久，导致后面简单题没时间做
Before you register
How difficult is the CompTIA PenTest+ (PT0-001) exam?
PenTest+ is an intermediate-level security certification, positioned between Security+ and advanced penetration testing certifications like OSCP. The exam contains up to 85 questions in 165 minutes, requiring a passing score of 750/900. Besides multiple choice, it includes performance-based questions (simulated operations) that require practical penetration testing knowledge.
What core domains does the PT0-001 exam cover?
The exam covers five domains: Planning and Scoping (15%), Information Gathering and Vulnerability Identification (22%), Attacks and Exploits (30%), Penetration Testing Tools (17%), and Reporting and Communication (16%). The Attacks and Exploits section has the highest weight, covering network attacks, web application attacks, wireless attacks, and more.
What is the difference between PT0-001 and PT0-002? Which should I take?
PT0-001 is the older version of PenTest+, while PT0-002 is the updated version with added content on cloud security penetration, IoT attacks, and more. If your testing center still offers PT0-001, both versions yield the same certification. Prioritize the latest version (PT0-002), but core penetration testing knowledge from PT0-001 remains applicable.
What prerequisites are needed for PenTest+?
It is recommended to first obtain CompTIA Security+ or equivalent security knowledge, with 3-4 years of cybersecurity hands-on experience. You should be familiar with tools like Nmap, Metasploit, and Burp Suite, understand OWASP Top 10 web vulnerabilities, and have Linux and Windows system administration fundamentals.
Which is more valuable: PenTest+ or CEH (Certified Ethical Hacker)?
PenTest+ emphasizes practical penetration testing skills and methodology, with hands-on simulation questions. CEH focuses more on theoretical knowledge and tool identification. PenTest+ is DoD 8570 approved, giving it strong recognition in government and defense sectors. Both are complementary, but PenTest+ offers better value ($392 exam fee vs CEH at $1,199+).
How should I effectively prepare for PenTest+?
Set up a penetration testing lab environment (Kali Linux + target machines) and practice various attack techniques hands-on. Focus on mastering penetration testing methodology (PTES) and report writing formats. Use this bank of 184 practice questions to solidify theoretical knowledge. The 165-minute exam time is relatively generous, but allocate enough time for performance-based questions.
Learner experiences
Loading reviews…
Start with the first chapter.
2 free chapters · Full preparation from $29