Penetration Testing — CompTIA PenTest+ (PT0-002) Practice Questions
Penetration testing is an authorized, simulated cyberattack conducted against a system, network, or application to identify exploitable vulnerabilities before malicious actors can. The PT0-002 exam is built entirely around this discipline, covering the full lifecycle from planning and scoping through reconnaissance, exploitation, post-exploitation, and final reporting. Candidates must understand the ethical and legal boundaries that separate penetration testing from unauthorized intrusion, including the necessity of written authorization and adherence to rules of engagement throughout the engagement.
Free questions on penetration testing
When reporting vulnerabilities, which of the following should be included in an executive summary?
Free question · easy · full answer + explanation
What is the purpose of a rules of engagement (RoE) document?
Free question · easy · full answer + explanation
What is the primary objective of the Planning and Scoping phase in a penetration test?
Free question · easy · full answer + explanation
What is a scope creep in a penetration test?
Free question · medium · full answer + explanation
An organization has contracted a penetration tester to assess their web application. The tester discovers an unpatched SQL injection vulnerability in the login form. What should the tester do FIRST?
Free question · easy · full answer + explanation
Which of the following best describes a vulnerability?
Free question · easy · full answer + explanation
What is a false positive in vulnerability scanning?
Free question · easy · full answer + explanation
Which tool is commonly used for DNS reconnaissance and zone transfers?
Free question · easy · full answer + explanation
What is the primary benefit of responsible disclosure?
Free question · easy · full answer + explanation
More penetration testing questions in the full bank
- What is a reverse shell? Unlock answer & explanation →
- What is the importance of remediation recommendations in a penetration test report? Unlock answer & explanation →
- What is a brute force attack? Unlock answer & explanation →