CompTIA PenTest+ PT0-002 Cert Guide, 2nd Edition

Chapter 1

Introduction to Ethical Hacking and Penetration Testing

This chapter covers the following topics related to Objective 1.1 (Compare and contrast governance, risk, and compliance concepts.) and Objective 1.2 (Explain the importance of scoping and organizational/customer requirements.) of the CompTIA PenTest+ PT0-002 certification exam:

• Permission to attack

• Standards and methodologies

  • MITRE AT T&CK

  • Open Web Application Security Project (OWASP)

  • National Institute of Standards and Technology (NIST)

  • Open Source Security Testing Methodology Manual (OSSTMM)

  • Penetration Testing Execution Standard (PTES)

  • Information Systems Security Assessment Framework (ISSAF)

• Environmental Considerations

  • Network

  • Application

  • Cloud

Before we jump into ...