CompTIA PenTest+ Study Roadmap
Last updated: March 30, 2026
Domain Weight Distribution
Week-by-Week Study Plan
Domain 1: Planning & Scoping — Rules of engagement, Compliance, Legal considerations
Domain 2: Passive Recon — OSINT, WHOIS, DNS enumeration, Shodan
Domain 2: Active Recon — Nmap scanning, Vulnerability scanners, Service enumeration
Domain 3: Network Attacks — MITM, Relay attacks, Pivoting, Lateral movement
Domain 3: Web App Attacks — SQL injection, XSS, CSRF, SSRF, File inclusion
Domain 3: Wireless & Cloud Attacks — Evil twin, WPA cracking, Cloud misconfigs
Domain 4: Reporting — Findings, Risk ratings, Executive summaries, Remediation
Domain 5: Scripting & Tools — Python, Bash, PowerShell, Metasploit, Burp Suite
Lab Practice: Full pentest simulation, Capture the flag, Tool mastery
Full Review: Practice tests, PBQ practice, Weak areas, Exam logistics
Free Resources
Professor Messer, CertMaster Practice
Related Tools
CompTIA PenTest+ Study Guide
Complete exam objectives and domain breakdown
✅Study Tracker
Track objective completion with progress dashboard
💰Cost Calculator
Total cost breakdown and ROI analysis
🧪Practice Quiz
Test your knowledge with free practice questions
FixTheVuln Store
Get the CompTIA PenTest+ Study Planner
Fillable PDF with 10-week schedule, domain trackers, flashcard templates, and progress tracking.
Get the Study Planner — $5.99