PT0-002 Cheat Sheet

PT0-002 Exam Blueprint — At a Glance

#	Domain	Weight	Questions	Practice
1.0	Planning and Scoping Planning and Scoping questions on this certification test your ability to deploy and manage planning and scoping concepts in scenario-based situations.	—	103	Practice →
2.0	Information Gathering and Vulnerability Scanning Threats, attacks and vulnerabilities questions test whether you can identify attack types, threat actor motivations and the correct mitigation for a given scenario.	—	103	Practice →
3.0	Attacks and Exploits Threats, attacks and vulnerabilities questions test whether you can identify attack types, threat actor motivations and the correct mitigation for a given scenario.	—	101	Practice →
4.0	Reporting and Communication Reporting and Communication questions on this certification test your ability to deploy and manage reporting and communication concepts in scenario-based situations.	—	102	Practice →
5.0	Tools and Code Analysis Tools and Code Analysis questions on this certification test your ability to deploy and manage tools and code analysis concepts in scenario-based situations.	—	100	Practice →

Domain Quick Reference

1.0Planning and Scoping

Planning and Scoping questions on this certification test your ability to deploy and manage planning and scoping concepts in scenario-based situations.

Key concepts

✓Core Planning and Scoping concepts and how they apply in real-world cloud scenarios.
✓How to deploy planning and scoping correctly and verify the outcome.
✓Troubleshooting planning and scoping issues by interpreting error output and system state.
✓Cloud best practices and Planning and Scoping design trade-offs tested by this certification.

Watch out for

⚠Selecting the most expensive service when a simpler managed option meets the requirement.
⚠Forgetting that cloud resources must be explicitly secured — defaults are rarely secure.
⚠Choosing a global service fix when the issue is region-specific.
⚠Overlooking cost implications of cross-region data transfer in architecture questions.

2.0Information Gathering and Vulnerability Scanning

Threats, attacks and vulnerabilities questions test whether you can identify attack types, threat actor motivations and the correct mitigation for a given scenario.

Key concepts

✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
✓Vulnerability scanning vs penetration testing vs risk assessment.
✓Mitigation strategies mapped to specific attack types.

Watch out for

⚠Social engineering targets people, not systems — the attack vector matters.
⚠A vulnerability scanner finds weaknesses; it does not exploit them.
⚠Phishing is email-based; vishing is voice-based; smishing is SMS-based.
⚠Zero-day vulnerabilities have no patch available at the time of discovery.

3.0Attacks and Exploits

Threats, attacks and vulnerabilities questions test whether you can identify attack types, threat actor motivations and the correct mitigation for a given scenario.

Key concepts

✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
✓Vulnerability scanning vs penetration testing vs risk assessment.
✓Mitigation strategies mapped to specific attack types.

Watch out for

⚠Social engineering targets people, not systems — the attack vector matters.
⚠A vulnerability scanner finds weaknesses; it does not exploit them.
⚠Phishing is email-based; vishing is voice-based; smishing is SMS-based.
⚠Zero-day vulnerabilities have no patch available at the time of discovery.

4.0Reporting and Communication

Reporting and Communication questions on this certification test your ability to deploy and manage reporting and communication concepts in scenario-based situations.

Key concepts

✓Core Reporting and Communication concepts and how they apply in real-world cloud scenarios.
✓How to deploy reporting and communication correctly and verify the outcome.
✓Troubleshooting reporting and communication issues by interpreting error output and system state.
✓Cloud best practices and Reporting and Communication design trade-offs tested by this certification.

Watch out for

⚠Selecting the most expensive service when a simpler managed option meets the requirement.
⚠Forgetting that cloud resources must be explicitly secured — defaults are rarely secure.
⚠Choosing a global service fix when the issue is region-specific.
⚠Overlooking cost implications of cross-region data transfer in architecture questions.

5.0Tools and Code Analysis

Tools and Code Analysis questions on this certification test your ability to deploy and manage tools and code analysis concepts in scenario-based situations.

Key concepts

✓Core Tools and Code Analysis concepts and how they apply in real-world cloud scenarios.
✓How to deploy tools and code analysis correctly and verify the outcome.
✓Troubleshooting tools and code analysis issues by interpreting error output and system state.
✓Cloud best practices and Tools and Code Analysis design trade-offs tested by this certification.

Watch out for

⚠Selecting the most expensive service when a simpler managed option meets the requirement.
⚠Forgetting that cloud resources must be explicitly secured — defaults are rarely secure.
⚠Choosing a global service fix when the issue is region-specific.
⚠Overlooking cost implications of cross-region data transfer in architecture questions.

Exam Day Reminders

→Read every question stem fully — look for qualifiers like 'MOST likely,' 'BEST,' or 'EXCEPT.'
→Flag uncertain questions and come back — don't waste time on one question.
→Eliminate obviously wrong options first, then choose between remaining ones.
→Trust your first instinct unless you have a specific reason to change.
→For PT0-002, scenarios typically have one clearly best answer — look for the option that matches the specific constraints in the question.

Domain

Weight

Questions

Practice

1.0

Planning and Scoping

Planning and Scoping questions on this certification test your ability to deploy and manage planning and scoping concepts in scenario-based situations.

—

103

Practice →

2.0

Information Gathering and Vulnerability Scanning

Threats, attacks and vulnerabilities questions test whether you can identify attack types, threat actor motivations and the correct mitigation for a given scenario.

—

103

Practice →

3.0

Attacks and Exploits

Threats, attacks and vulnerabilities questions test whether you can identify attack types, threat actor motivations and the correct mitigation for a given scenario.

—

101

Practice →

4.0

Reporting and Communication

Reporting and Communication questions on this certification test your ability to deploy and manage reporting and communication concepts in scenario-based situations.

—

102

Practice →

5.0

Tools and Code Analysis

Tools and Code Analysis questions on this certification test your ability to deploy and manage tools and code analysis concepts in scenario-based situations.

—

100

Practice →

Domain Quick Reference

1.0Planning and Scoping

Planning and Scoping questions on this certification test your ability to deploy and manage planning and scoping concepts in scenario-based situations.

Key concepts

✓Core Planning and Scoping concepts and how they apply in real-world cloud scenarios.
✓How to deploy planning and scoping correctly and verify the outcome.
✓Troubleshooting planning and scoping issues by interpreting error output and system state.
✓Cloud best practices and Planning and Scoping design trade-offs tested by this certification.

Watch out for

⚠Selecting the most expensive service when a simpler managed option meets the requirement.
⚠Forgetting that cloud resources must be explicitly secured — defaults are rarely secure.
⚠Choosing a global service fix when the issue is region-specific.
⚠Overlooking cost implications of cross-region data transfer in architecture questions.

2.0Information Gathering and Vulnerability Scanning

Threats, attacks and vulnerabilities questions test whether you can identify attack types, threat actor motivations and the correct mitigation for a given scenario.

Key concepts

✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
✓Vulnerability scanning vs penetration testing vs risk assessment.
✓Mitigation strategies mapped to specific attack types.

Watch out for

⚠Social engineering targets people, not systems — the attack vector matters.
⚠A vulnerability scanner finds weaknesses; it does not exploit them.
⚠Phishing is email-based; vishing is voice-based; smishing is SMS-based.
⚠Zero-day vulnerabilities have no patch available at the time of discovery.

3.0Attacks and Exploits

Threats, attacks and vulnerabilities questions test whether you can identify attack types, threat actor motivations and the correct mitigation for a given scenario.

Key concepts

✓Threat actor types and motivations (APT, script kiddie, insider, nation-state).
✓Attack techniques: phishing, social engineering, ransomware, SQL injection, XSS.
✓Vulnerability scanning vs penetration testing vs risk assessment.
✓Mitigation strategies mapped to specific attack types.

Watch out for

⚠Social engineering targets people, not systems — the attack vector matters.
⚠A vulnerability scanner finds weaknesses; it does not exploit them.
⚠Phishing is email-based; vishing is voice-based; smishing is SMS-based.
⚠Zero-day vulnerabilities have no patch available at the time of discovery.

4.0Reporting and Communication

Reporting and Communication questions on this certification test your ability to deploy and manage reporting and communication concepts in scenario-based situations.

Key concepts

✓Core Reporting and Communication concepts and how they apply in real-world cloud scenarios.
✓How to deploy reporting and communication correctly and verify the outcome.
✓Troubleshooting reporting and communication issues by interpreting error output and system state.
✓Cloud best practices and Reporting and Communication design trade-offs tested by this certification.

Watch out for

⚠Selecting the most expensive service when a simpler managed option meets the requirement.
⚠Forgetting that cloud resources must be explicitly secured — defaults are rarely secure.
⚠Choosing a global service fix when the issue is region-specific.
⚠Overlooking cost implications of cross-region data transfer in architecture questions.

5.0Tools and Code Analysis

Tools and Code Analysis questions on this certification test your ability to deploy and manage tools and code analysis concepts in scenario-based situations.

Key concepts

✓Core Tools and Code Analysis concepts and how they apply in real-world cloud scenarios.
✓How to deploy tools and code analysis correctly and verify the outcome.
✓Troubleshooting tools and code analysis issues by interpreting error output and system state.
✓Cloud best practices and Tools and Code Analysis design trade-offs tested by this certification.

Watch out for

⚠Selecting the most expensive service when a simpler managed option meets the requirement.
⚠Forgetting that cloud resources must be explicitly secured — defaults are rarely secure.
⚠Choosing a global service fix when the issue is region-specific.
⚠Overlooking cost implications of cross-region data transfer in architecture questions.

Exam Day Reminders

→Read every question stem fully — look for qualifiers like 'MOST likely,' 'BEST,' or 'EXCEPT.'

→Flag uncertain questions and come back — don't waste time on one question.

→Eliminate obviously wrong options first, then choose between remaining ones.

→Trust your first instinct unless you have a specific reason to change.

→For PT0-002, scenarios typically have one clearly best answer — look for the option that matches the specific constraints in the question.

PT0-002 Exam Blueprint — At a Glance

Domain Quick Reference

1.0Planning and Scoping

2.0Information Gathering and Vulnerability Scanning

3.0Attacks and Exploits

4.0Reporting and Communication

5.0Tools and Code Analysis

Exam Day Reminders

More PT0-002 resources

PT0-002 Cheat Sheet

PT0-002 Exam Blueprint — At a Glance

Domain Quick Reference

1.0Planning and Scoping

2.0Information Gathering and Vulnerability Scanning

3.0Attacks and Exploits

4.0Reporting and Communication

5.0Tools and Code Analysis

Exam Day Reminders

More PT0-002 resources