Understand the certification
认证概述
CompTIA PenTest+（PT1-002）是目前市场上少数既考理论又含性能型实操题（PBQ）的渗透测试认证。它验证你完成一次完整渗透测试项目的能力：从与客户签订授权协议、制定测试计划，到执行漏洞扫描和攻击利用，再到输出专业报告和修复建议。相比旧版新增了 AWS/Azure 云环境渗透、IoT 设备攻击面分析和 Python/Bash 自动化脚本考查，更贴合 2024 年之后的渗透测试实战场景。
考试领域
- 计划与范围界定（Planning and Scoping）— 14%：渗透测试授权协议、测试边界定义、法律合规要求、参与规则（Rules of Engagement）
- 信息收集与漏洞扫描（Information Gathering and Vulnerability Scanning）— 22%：被动/主动侦察、Nmap 扫描技术、Nessus/OpenVAS 漏洞扫描、OSINT 情报收集
- 攻击与漏洞利用（Attacks and Exploits）— 30%：Metasploit 框架、Web 应用攻击（SQL 注入/XSS/CSRF）、网络中间人攻击、无线网络攻击、云环境渗透
- 报告与沟通（Reporting and Communication）— 18%：渗透测试报告结构、风险评级（CVSS）、修复建议写作、向技术/管理层汇报
- 工具与代码分析（Tools and Code Analysis）— 16%：Burp Suite、Wireshark、Kali Linux 工具集，Python/Bash 脚本阅读与编写
适合人群
渗透测试工程师（Penetration Tester）、漏洞评估分析师（Vulnerability Assessment Analyst）、安全顾问（Security Consultant），以及需要满足 DoD 8570/8140 资质要求的政府和国防安全岗位人员。建议具备 Security+ 或同等知识水平加 3 年以上信息安全工作经验。
Exam at a glance
- Exam code
- PT1-002
- Provider
- CompTIA
- Format
- Single choice / Multiple select
- Language
- English
- Validity
- 3 years
- Exam fee
- $392
Skills in focus
Learning outcomes
- 获得 CompTIA PenTest+（PT1-002）官方认证，满足 DoD 8570/8140 资质要求
- 具备独立执行完整渗透测试项目的能力：从授权协议到最终报告
- 掌握 Metasploit、Burp Suite、Nmap、Wireshark 等主流渗透测试工具的实战用法
- 能够对 Web 应用（SQL 注入/XSS）、网络服务和云环境（AWS/Azure）执行安全评估
- 具备向技术团队和管理层输出专业渗透测试报告的能力，包含 CVSS 风险评级
Who this is for
- 渗透测试工程师（Penetration Tester）和漏洞评估分析师（Vulnerability Assessment Analyst）
- 安全顾问（Security Consultant）负责客户网络和应用安全评估
- 持有 Security+ 想进阶攻击性安全方向的 IT 安全专业人员
- 政府和国防安全岗位需满足 DoD 8570/8140 IAT/IAM Level II 资质
- 红队成员（Red Team）和 SOC 分析师想理解攻击者视角
Before you start
- CompTIA Security+ 或同等安全基础知识（CIA 三元组、加密原理、网络协议）
- 3-4 年信息安全工作经验，有过漏洞评估或安全测试项目经验
- 熟练使用 Nmap、Nessus/OpenVAS 进行网络扫描和漏洞发现
- 基本的 Python 或 Bash 脚本能力（能读懂并修改简单脚本）
- 了解 OWASP Top 10 Web 应用漏洞和基本的网络协议（HTTP/TCP/DNS）
Your learning path
Plan your preparation
- Learning hours
- 20h
- With relevant experience
- 4-6 weeks
- Starting from scratch
- 8-10 weeks
- Daily study
- 1-2h
Included in your preparation
- 覆盖攻击与利用（30%）、信息收集（22%）、报告沟通（18%）、工具代码（16%）、计划范围（14%）五大考域
- 136 精选练习题，含真实渗透场景题（PBQ 类型），覆盖 Metasploit 使用和代码分析
- 仿真模拟考试（85 题/165 分钟），还原含 PBQ 性能型题目的真实考场体验
- 错题本智能推送，重点强化攻击技术和工具使用场景
- DoD 8570/8140 认可，政府安全岗位和红队岗位的核心资质
Preparation tips
- 85 题 165 分钟，平均每题 2 分钟，合理分配时间
- 及格分 750/900，不确定的题先标记跳过，回头再做
- 排除法非常有用 — 先排掉明显错误的选项，剩下的再分析
- 多选题会告诉你选几个，仔细看题目要求
Common mistakes
- 没有读完所有选项就选答案 — 题目经常有"最佳"答案和"正确但不最佳"的干扰项
- 备考只刷题不理解原理 — 考试场景题需要理解底层概念
- 忽略时间管理 — 在难题上卡太久，导致后面简单题没时间做
Before you register
What are the key features of the CompTIA PenTest+ (PT1-002) exam?
PT1-002 is the latest version of PenTest+, with up to 85 questions in 165 minutes and a passing score of 750/900. Compared to the older version, it adds cloud environment penetration testing, IoT/embedded device attacks, and automation scripting, better aligning with current security industry needs.
What core domains does the PT1-002 exam cover?
The exam covers five domains: Planning and Scoping (14%), Information Gathering and Vulnerability Scanning (22%), Attacks and Exploits (30%), Reporting and Communication (18%), and Tools and Code Analysis (16%). The new version enhances coverage of cloud penetration (AWS/Azure) and scripting automation (Python/Bash).
What prerequisite skills are needed for PT1-002?
Security+ equivalent knowledge and 3-4 years of information security work experience is recommended. You need proficiency with tools like Nmap, Metasploit, Burp Suite, and Wireshark, understanding of OWASP Top 10, basic Python/Bash scripting ability, and foundational knowledge of cloud service security.
How should I prepare for the performance-based questions (PBQs) in PT1-002?
PBQs simulate real penetration testing scenarios, requiring you to analyze Nmap scan results, write exploitation commands, or interpret code snippets. Practice tool operations extensively in a Kali Linux environment, focusing on command-line syntax and output interpretation. These questions carry higher value, so consider completing multiple-choice questions first and returning to PBQs afterward.
How does PenTest+ certification help career development?
PenTest+ is DoD 8570/8140 approved, serving as a gateway for security positions in government and defense sectors. Certified professionals typically work as penetration testing engineers, security consultants, or vulnerability assessment analysts. Industry data shows PenTest+ holders earn average salaries between $80,000-$120,000.
How long is the PT1-002 certification valid? How do I renew?
PenTest+ certification is valid for 3 years. You can renew by earning 60 CEU credits (attending training, publishing articles, participating in security projects) or by passing a higher-level certification (such as CASP+). You may also choose to retake the latest version of the exam.
Learner experiences
Loading reviews…
Start with the first chapter.
2 free chapters · Full preparation from $29