← All Certifications
CompTIA

CompTIA PenTest+ Certification

PT0-003 · 5 domains

Last updated: March 31, 2026

Exam Syllabus & Domains

The CompTIA PenTest+ certification exam covers the following domains. Focus your training time proportionally to each domain's weight.

Domain 1 14%

Planning and Scoping

  • 1.1 Compare and contrast governance, risk, and compliance reports
  • 1.2 Explain the importance of scoping and organizational requirements
  • 1.3 Demonstrate an ethical hacking mindset
Rules of EngagementScope DefinitionLegal AuthorizationCompliance RequirementsThreat ModelingRisk AssessmentCommunication PlanningEthical Hacking MindsetThird-Party Authorization
Domain 2 22%

Information Gathering and Vulnerability Scanning

  • 2.1 Perform passive reconnaissance
  • 2.2 Perform active reconnaissance
  • 2.3 Analyze results of reconnaissance exercises
  • 2.4 Perform vulnerability scanning
OSINT TechniquesWHOIS LookupsDNS Zone TransfersPort ScanningService EnumerationBanner GrabbingVulnerability ScanningNmap Scan TypesShodan and Censys
Domain 3 30%

Attacks and Exploits

  • 3.1 Research attack vectors and perform network attacks
  • 3.2 Research attack vectors and perform wireless attacks
  • 3.3 Research attack vectors and perform application-based attacks
  • 3.4 Research attack vectors and perform attacks on cloud technologies
SQL InjectionCross-Site Scripting (XSS)CSRF AttacksSSRF AttacksBuffer OverflowPassword AttacksMITM AttacksLateral MovementPrivilege EscalationPivoting
Domain 4 18%

Reporting and Communication

  • 4.1 Compare and contrast components of written reports
  • 4.2 Analyze findings and recommend remediation
  • 4.3 Explain the importance of communication during penetration testing
  • 4.4 Explain post-report delivery activities
Report StructureExecutive SummaryRisk Rating SystemsRemediation RecommendationsAttestation ReportsDebrief ProcessClient CommunicationFindings Classification
Domain 5 16%

Tools and Code Analysis

  • 5.1 Explain concepts of scripting use cases for penetration testing
  • 5.2 Analyze a script or code sample for use in a penetration test
  • 5.3 Use appropriate tools during penetration testing phases
Python for PentestingBash ScriptingPowerShell ExploitationMetasploit FrameworkBurp SuiteNmap Scripting EngineCode Review BasicsExploit Development Concepts

Where to Focus Your Study Time

Domains with higher weight have more exam questions — allocate your study hours accordingly.

D1 Planning and Scoping
14%
D2 Information Gathering and Vulnerability Scanning
22%
D3 Attacks and Exploits
30%
D4 Reporting and Communication
18%
D5 Tools and Code Analysis
16%

Study Tips

Free Study Resources

๐Ÿ“‹

Study Roadmap

Week-by-week study plan with free resources

โœ…

Study Tracker

Track objective completion with progress dashboard

๐Ÿ’ฐ

Cost Calculator

Total cost breakdown and ROI analysis

๐Ÿงช

Practice Quiz

Test your knowledge with free practice questions

Practice Quiz

Test your knowledge before the exam with our free practice quiz.

Take the CompTIA PenTest+ Practice Quiz

Related Comparisons

Not sure if CompTIA PenTest+ is the right choice? Compare it with similar certifications:

Security+ vs PenTest+ CEH vs PenTest+ OSCP vs PenTest+ CASP+ vs PenTest+

Get the CompTIA PenTest+ Study Planner

Fillable PDF with 10-week schedule, domain trackers, flashcard templates, progress tracking, and quick reference sheets. Available in Standard, ADHD-Friendly, Dark Mode, and 4-Format Bundle.

Get the Study Planner — $5.99

Also available as a 4-Format Bundle for $15.99

CyberFolio

Earned your certs? Show employers.

Build a shareable cybersecurity portfolio that highlights your certifications, projects, and skills — free.

Build Your Portfolio →

Free Training Resources

Use these free tools to support your CompTIA PenTest+ certification training:

Frequently Asked Questions

What is the CompTIA PenTest+ certification?

The CompTIA PenTest+ (PT0-003) is a professional IT certification that validates your knowledge and skills in the exam domains covered. It is recognized globally by employers and is a valuable credential for career advancement in cybersecurity and IT.

What does the CompTIA PenTest+ certification syllabus cover?

The CompTIA PenTest+ exam syllabus covers 5 domains. Each domain is weighted differently, so focus your training on higher-weighted domains first. Review the complete domain breakdown above for objectives and key concepts.

How should I study for CompTIA PenTest+?

Create a structured study plan covering all exam domains, use practice tests to identify weak areas, and review key concepts regularly. A fillable study planner can help you organize your training with weekly schedules and progress tracking.

How long does it take to prepare for CompTIA PenTest+?

Preparation time varies by experience level. Most candidates spend 8-12 weeks of dedicated training. Using a structured study planner with domain-by-domain breakdown helps ensure you cover all certification objectives efficiently.