Pentest+ — CompTIA PenTest+ (PT0-002) Practice Questions
CompTIA PenTest+ (PT0-002) is an intermediate-level certification validating the knowledge and skills required to plan, scope, execute, and report on penetration tests across network, web, cloud, and operational technology environments. Unlike purely technical certifications, PenTest+ also covers the governance, risk, and compliance aspects of ethical hacking, making it suitable for roles that require both hands-on skill and professional judgment. The exam uses a combination of multiple-choice and performance-based questions to assess practical ability across the full penetration testing lifecycle.
Free questions on pentest+
What is the purpose of a rules of engagement (RoE) document?
Free question · easy · full answer + explanation
A company is concerned about their exposed attack surface. Which of the following is NOT part of the external attack surface?
Free question · medium · full answer + explanation
What is a scope creep in a penetration test?
Free question · medium · full answer + explanation
A penetration tester is conducting a network assessment and needs to identify all running services on a host. Which scanning technique provides the most reliable results with the least network traffic?
Free question · medium · full answer + explanation
What does CVSS stand for?
Free question · easy · full answer + explanation
Which Nmap scan type sends TCP packets with no flags set?
Free question · medium · full answer + explanation
During information gathering, a penetration tester discovers email addresses of key employees through LinkedIn and public websites. What type of information gathering is this?
Free question · easy · full answer + explanation
More pentest+ questions in the full bank
- What information gathering technique is MOST useful for identifying default credentials? Unlock answer & explanation →
- You need to automate scanning across multiple targets. Which scripting approach is most flexible? Unlock answer & explanation →
- Which of the following is a reflected XSS vulnerability? Unlock answer & explanation →