CompTIA certification practice
Practise CompTIA PenTest+ (PT0-003) PT0-003 across all 5 official exam domains — Post-exploitation and Lateral Movement, Vulnerability Discovery and Analysis, Engagement Management, Reconnaissance and Enumeration, and more — with original exam-style questions, full explanations, and wrong-answer analysis. CompTIA exams reward broad practical understanding. Courseiva helps you practise IT support, networking, security and troubleshooting concepts with realistic questions and clear answer explanations.
Ways to study PT0-002
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
New here? Start with this
Start with a 25-question practice test
Covers all 5 domains · takes ~5 min · no account needed · shows your weak areas immediately
Key facts for the CompTIA PenTest+ (PT0-003) exam.
Exam cost
$392 USD / ~£320
Duration
165 minutes
Question count
Maximum 85 questions
Passing score
750 / 900
Validity
3 years
Delivered by
Pearson VUE
Online proctored
Yes — available
Retake policy
No wait after first attempt; 14 days after second failure
Question formats
CompTIA PenTest+ (PT0-002) validates intermediate penetration testing skills including planning, scoping, vulnerability identification, exploitation, post-exploitation, and reporting. It is vendor-neutral and covers both traditional and cloud penetration testing.
Official prerequisite
None
Recommended experience
Network+ and Security+ or 3–4 years of hands-on information security experience
Security+ knowledge plus 3–4 years in IT security. Should understand networking and basic exploitation concepts.
Should you skip this exam?
PenTest+ is recognised less than OSCP in the penetration testing community. If you want to work as a hands-on penetration tester, OSCP carries significantly more weight. PenTest+ is better for compliance-focused or management roles.
Courseiva study tip
Unlike OSCP which is purely practical, PenTest+ also covers reporting, scoping, and legal/compliance. Do not neglect these non-technical areas — they are heavily represented on the exam.
UK salary range
£45,000–£75,000
US salary range
$75,000–$115,000
Job roles that cite PT0-002
What certification to take next
$392 USD.
750 out of 900.
PenTest+ is useful for proving a methodological understanding of penetration testing. For hands-on practitioner roles, OSCP is considered more credible. PenTest+ suits candidates in compliance, consulting, or management roles who need a recognised pen testing credential.
OSCP is more respected for hands-on penetration testing roles — it requires passing a 24-hour practical exam. PenTest+ is multiple-choice and covers methodology, reporting, and tools at a conceptual level. If budget and time allow, OSCP is the stronger choice for a technical career.
Yes — 3 years, with renewal through CompTIA CE.
See how PT0-002 stacks up against related certifications.
100% free — no account required
Everything on Courseiva for PT0-002 is free — no subscription, no trial, no email wall. Pick a mode that matches your study phase: practice questions early on, mock exams closer to your exam date.
Practice Test
A focused 20-question round with worked explanations for every answer.
Mock Exam
Simulate the real exam with a timed, full-length question set.
Quick 25
A 25-question warm-up — ideal for a short daily study session.
Domain Practice
Focus exclusively on one exam domain to target your weakest area.
50-Question Set
Mid-length practice covering the full domain spread.
Cheat sheet
The key facts and numbers for this exam on one page.
Acronyms
A full glossary of acronyms from the official blueprint.
Official objectives
The full exam blueprint mapped to practice resources.
Exam glossary
A full glossary of PT0-002 exam terminology.
Practice by topic
Focused question pages for every exam topic.
Courseiva Exam Intelligence
Data confidence: BuildingDerived from Courseiva's continuously updated practice dataset: 185 exam-style questions. Updated 2 July 2026.
Question difficulty mix
Average time per question: 92s
5
Exam domains
official blueprint domains covered by the bank
185
Questions
exam-style questions in the PT0-002 bank
Exam guide
Start with a short practice session, review each missed answer, then return to the topics that caused mistakes.
CompTIA PenTest+ (PT0-003) PT0-003 spans 5 official exam domains (Post-exploitation and Lateral Movement, Vulnerability Discovery and Analysis, Engagement Management, and more). Questions test whether you can apply each objective in a realistic scenario, not just recall a definition.
Related practice questions
Use these internal links to move from the exam guide into focused topic practice pages.
Targeted PT0-003 practice covering Post-exploitation and Lateral Movement.
Sharpen your PT0-003 knowledge of Vulnerability Discovery and Analysis.
Practise PT0-003 questions linked to Engagement Management.
Targeted PT0-003 practice covering Reconnaissance and Enumeration.
Targeted PT0-003 practice covering Attacks and Exploits.
Work through PT0-003 questions on PT0-003 fundamentals.
Targeted PT0-003 practice covering PT0-003 scenario.
PT0-003 troubleshooting practice questions for PT0-003.
Practice directory
Every practice set is a unique selection of questions — numbered tests, domain-focused sessions, and topic-specific quizzes.
Showing 8 of 15 tests. See all 15 PT0-002 practice tests →
Official blueprint
Target weak areas by practising questions from a single domain. Each domain page shows all questions, difficulty breakdown, and a focused practice session.
Target this domain to strengthen your PT0-002 score →
Practise PT0-002 questions in this domain →
Focus your PT0-002 prep on Engagement Management →
Practise PT0-002 questions in this domain →
Practise PT0-002 questions in this domain →
Deep-dive questions
The most-searched PT0-002 questions — each with a detailed explanation, worked example, and full answer breakdown.
Term reference
These terms appear frequently in PT0-002 questions. Understanding them precisely reduces guessing and improves scores.
Phishing
Phishing is a type of cyber attack where criminals impersonate legitimate organizations or individuals to trick victims into revealing sensitive information such as passwords, credit card numbers, or personal data.
Spear phishing
Spear phishing is a targeted cyberattack in which a criminal sends a fraudulent email that appears to come from a trusted source, aiming to trick a specific person or organization into revealing sensitive data or installing malware.
Authorization
Authorization determines what an authenticated user is allowed to do within a system, such as accessing files, running programs, or changing settings.
CSRF
Cross-Site Request Forgery is an attack that tricks a user into performing an unwanted action on a web application where they are currently authenticated.
CVE
CVE stands for Common Vulnerabilities and Exposures, which is a publicly available list of standardized identifiers for known security vulnerabilities in software and hardware.
Deauthentication attack
A deauthentication attack is a wireless network exploit where an attacker sends fake disconnection frames to force devices off a Wi-Fi network, often used to capture handshake data or disrupt connectivity.
Credentialed scan
A credentialed scan is a vulnerability assessment that uses valid user credentials to log into a target system, allowing deeper inspection of the system's internal configuration and software.
CVSS
The Common Vulnerability Scoring System (CVSS) is a standardized framework used to rate the severity of security vulnerabilities on a scale from 0 to 10.
Learn the concepts
104 book-style chapters cover every PT0-002 objective in plain English. Read the theory here, then test it with practice questions.
Chapter 1
Penetration Testing Methodology
25 min read
Chapter 2
Scope, Rules of Engagement, and Legal
25 min read
Chapter 3
OSINT and Passive Reconnaissance
25 min read
Chapter 4
Active Scanning and Enumeration
25 min read
Chapter 5
Vulnerability Identification
25 min read
Chapter 6
Network Exploitation
25 min read
Chapter 7
Web Application Attacks
25 min read
Chapter 8
Social Engineering Attacks
25 min read
Free study guide
The Courseiva PT0-002 study guide covers exam format, the official domain blueprint with weights, a structured study plan, and domain-specific tips for each section. Use it alongside practice questions to build both conceptual depth and exam confidence.
Sample questions
Original exam-style questions — not copied from any exam or dump site. Open a question for the full answer breakdown.
A penetration tester is writing the executive summary for the final report. The CEO needs to understand the overall risk level and the business impact of the findings. Which of the…
A penetration tester has identified a critical misconfiguration in a cloud storage bucket that exposes sensitive customer data. The client's technical team has already applied a fi…
A penetration tester needs to describe a stored XSS vulnerability to a web developer who will fix it. Which level of detail is most appropriate for this audience?
A penetration tester runs the following command: nmap -sS -p 1-65535 -T4 -A -O --reason target. What is the primary purpose of the -A option in this command?
A penetration tester is preparing a report for a client that includes both a technical security team and an executive leadership team. The executive team needs to understand the ov…
A penetration tester is reviewing a Python script that attempts to exploit a command injection vulnerability. The script uses the 'subprocess' module with the 'shell=True' argument…
Related certifications
Studying for PT0-002? These related CompTIA certifications share concepts and are common next steps.
Security+
SY0-701 · 1,013 practice questions
CompTIA ITF+
FC0-U71 · 988 practice questions
CompTIA Data+
DA0-002 · 986 practice questions
CompTIA Project+
PK0-005 · 980 practice questions
CompTIA Linux+
XK0-006 · 979 practice questions
CompTIA Cloud+
CV0-004 · 977 practice questions
Official booking and top-rated study resources for the PT0-002.
Courseiva provides free CompTIA PenTest+ (PT0-003) (PT0-003) practice questions with original exam-style questions, detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics. Courseiva is an independent platform and is not affiliated with CompTIA.