CompTIA PenTest Plus

Description

Penetration testing, or ethical hacking, offers key benefits for organizations, including preventing cyberattacks, protecting sensitive data, ensuring compliance with regulations, and reducing financial risks. By identifying vulnerabilities before they can be exploited by attackers, businesses can strengthen their security, improve resilience, and build trust with customers, clients, and partners.

In today’s digital landscape, ethical hacking is essential for any organization that wants to protect its digital assets and stay ahead of evolving cyber threats. It helps reduce risks and creates a safer digital environment for everyone involved.

Prerequisites

There are no mandatory prerequisites for taking the PTO-002 exam, but a certain foundational knowledge and experience in cybersecurity is recommended to be successful in the certification.

Target Audience

It’s ideal for candidates with a foundational knowledge of cybersecurity who want to specialize in ethical hacking and security assessments.

List of subjects

• Penetration Testing
  • What Is Penetration Testing?
  • Reasons for Penetration Testing
  • Who Performs Penetration Tests?
  • The CompTIA Penetration Testing Process
  • The Cyber Kill Chain
  • Tools of the Trade
• Planning and Scoping Penetration Tests
  • Scoping and Planning Engagements
  • Penetration Testing Standard and Methodologies
  • Key Legal Concepts fot Penetrations Tests
  • Regulatory Compliance Considerations
• Information Gathering
  • Footprinting and Enumeration
  • Active Reconaissance and Enumeration
  • Information Gathering and Defenses
• Vulnerability Scanning
  • Indentifying Vulnerability Management Requiremtents
  • Configuring and Executing Vulnerability Scans
  • Software Security Testing
  • Developing a Remediation Workflow
  • Overcoming Barriers to Vulnerability Scanning
• Analyzing Vulnerability Scans
  • Reviewing and Interpreting Scans Reports
  • Validating Scan Results
  • Common Vulnerabilities
• Exploiting and Pivoting
  • Exploits and Attacks
  • Exploitations Toolkits
  • Exploit Specifics
  • Leveraging Exploits
  • Persistence and Evasion
  • Pivoting
  • Covering Your Tracks
• Exploiting Network Vulnerabilities
  • Indentifying Exploits
  • Conducting Network Exploits
  • Exploiting Windows Services
  • Indentifyning and Exploiting Common Services
  • Wireless Exploits
• Exlpoiting Physical and Social Vulnerabilities
  • Physical Facility Penetration Testing
  • Social Engeneering
• Exploiting Application Vulnerabilities
  • Exploiting Injection Vulnerabilities
  • Exploiting Authentication Vulnerabilities
  • Exploiting Authorization Vulnerabilities
  • Exploiting Web Application Vulnerabilities
  • Unsecure Coding Practices
  • Steganography
  • Application Testing Tools
• Attacking Hosts, Cloud Technologies, and Specialized Systems
  • Attacking Hosts
  • Credential Attacks and Testing Tools
  • Remote Access
  • Attacking Virtual Machines and Containers
  • Attacking Cloud Technologies
  • Attacking Mobile Devices
  • Attacking IoT, ICS, Embedded Systems, and SCADA Devices
  • Attacking Data Storage
• Reporting and Communnication
  • The Importance of Communication
  • Recommending Mitigation Strategies
  • Writing a Penetration Testing Report
  • Wrapping Up the Engagement
• Scripting for Penetration Testing
  • Scripting and Penetration Testing
  • Variables, Arrays, and Substitutions
  • Comparison Operations
  • String Operations
  • Flow Control
  • Input and Output (I/O)
  • Error Handling
  • Advanced Data Structures
  • Reusing Code
  • The Role of Coding in Penetration Testing

Vervolgcursussen

CompTIA Security+