Search...
Master key concepts with interactive flashcards
What document provides the legal authorization to perform penetration testing activities?
Click to reveal answer
Rules of Engagement (ROE) / Statement of Authorization — a signed document specifying the scope, authorized targets, permitted techniques, timeframe, and emergency contact procedures. Without this, testing is unauthorized and potentially illegal.
Click to show question
CompTIA PenTest+ (PT0-003) is a CompTIA certification. These facts come from the current exam guide and are the numbers to plan around.
| Domain | Weight | What to focus on |
|---|---|---|
| Attacks and Exploits | 35% | Network attacks and exploitation, Web application attacks (OWASP Top 10), Wireless attacks and WPA2 cracking |
| Reconnaissance and Enumeration | 21% | OSINT and passive reconnaissance, Active scanning and enumeration, DNS reconnaissance |
| Vulnerability Discovery and Analysis | 17% | Vulnerability scanning tools (Nessus, OpenVAS), CVSS scoring and prioritization, Manual vulnerability analysis |
| Post-exploitation and Lateral Movement | 14% |
| Privilege escalation techniques, Persistence mechanisms, Lateral movement with pass-the-hash/ticket |
| Engagement Management | 13% | Rules of engagement and scoping, Legal considerations and authorization, Statement of work and contracts |
Yes. You can start PT0-003 practice and flashcards free without creating an account. A free account keeps your progress, and the full bank (300+ questions) unlocks with a subscription.
They cover all 5 domains of the PT0-003 exam: Attacks and Exploits (35%), Reconnaissance and Enumeration (21%), Vulnerability Discovery and Analysis (17%), Post-exploitation and Lateral Movement (14%), Engagement Management (13%). Each section is weighted in the same proportion as the real exam, so nothing high-value is buried.
The PT0-003 exam has approximately 90 questions in 165 minutes, with a passing score of 750. Use the practice questions to confirm you are consistently above that line before booking the real exam.
Study in short, spaced sessions: a card you have not seen for two days is worth more than a card you reread immediately. Filter by Attacks and Exploits first, then mix domains so you practise identifying the topic before recalling the definition.
They are the recall half of preparation. Pair the cards with practice questions and at least one timed practice exam — candidates who only review cards usually recognise terms but miss scenario questions.