book

CompTIA PenTest+ PT0-002 Cert Guide, 2nd Edition

Name: CompTIA PenTest+ PT0-002 Cert Guide, 2nd Edition
Author: Omar Santos
ISBN: 9780137566204

by Omar Santos

December 2021

Intermediate to advanced

624 pages

16h 53m

English

Pearson IT Certification

Read now

Unlock full access

Cover Page
About This eBook
Title Page
Copyright Page
Credits
Contents at a Glance
Contents
About the Author
Dedication
Acknowledgments

About the Technical Reviewer
We Want to Hear from You!
Reader Services
Introduction
The Goals of the CompTIA PenTest+ CertificationThe Exam Objectives (Domains)Steps to Earning the PenTest+ CertificationFacts About the PenTest+ ExamAbout the CompTIA PenTest+ PT0-002 Cert GuideCompanion WebsitePearson Test Prep Practice Test Software
Chapter 1 Introduction to Ethical Hacking and Penetration Testing
“Do I Know This Already?” QuizFoundation TopicsUnderstanding Ethical Hacking and Penetration TestingExploring Penetration Testing MethodologiesBuilding Your Own LabExam Preparation TasksReview All Key TopicsDefine Key TermsQ&A
Chapter 2 Planning and Scoping a Penetration Testing Assessment
“Do I Know This Already?” QuizFoundation TopicsComparing and Contrasting Governance, Risk, and Compliance ConceptsExplaining the Importance of Scoping and Organizational or Customer RequirementsDemonstrating an Ethical Hacking Mindset by Maintaining Professionalism and IntegrityExam Preparation TasksReview All Key TopicsDefine Key TermsQ&A
Chapter 3 Information Gathering and Vulnerability Scanning
“Do I Know This Already?” QuizFoundation TopicsPerforming Passive ReconnaissancePerforming Active ReconnaissanceUnderstanding the Art of Performing Vulnerability ScansUnderstanding How to Analyze Vulnerability Scan ResultsExam Preparation TasksReview All Key TopicsDefine Key TermsQ&A
Chapter 4 Social Engineering Attacks
“Do I Know This Already?” QuizFoundation TopicsPretexting for an Approach and ImpersonationSocial Engineering AttacksPhysical AttacksSocial Engineering ToolsMethods of InfluenceExam Preparation TasksReview All Key TopicsDefine Key TermsQ&A
Chapter 5 Exploiting Wired and Wireless Networks
“Do I Know This Already?” QuizFoundation TopicsExploiting Network-Based VulnerabilitiesExploiting Wireless VulnerabilitiesExam Preparation TasksReview All Key TopicsDefine Key TermsQ&A
Chapter 6 Exploiting Application-Based Vulnerabilities
“Do I Know This Already?” QuizFoundation TopicsOverview of Web Application-Based Attacks for Security Professionals and the OWASP Top 10How to Build Your Own Web Application LabUnderstanding Business Logic FlawsUnderstanding Injection-Based VulnerabilitiesExploiting Authentication-Based VulnerabilitiesExploiting Authorization-Based VulnerabilitiesUnderstanding Cross-Site Scripting (XSS) VulnerabilitiesUnderstanding Cross-Site Request Forgery (CSRF/XSRF) and Server-Side Request Forgery AttacksUnderstanding ClickjackingExploiting Security MisconfigurationsExploiting File Inclusion VulnerabilitiesExploiting Insecure Code PracticesExam Preparation TasksReview All Key TopicsDefine Key TermsQ&A
Chapter 7 Cloud, Mobile, and IoT Security
“Do I Know This Already?” QuizFoundation TopicsResearching Attack Vectors and Performing Attacks on Cloud TechnologiesExplaining Common Attacks and Vulnerabilities Against Specialized SystemsExam Preparation TasksReview All Key TopicsDefine Key TermsQ&A
Chapter 8 Performing Post-Exploitation Techniques
“Do I Know This Already?” QuizFoundation TopicsCreating a Foothold and Maintaining Persistence After Compromising a SystemUnderstanding How to Perform Lateral Movement, Detection Avoidance, and EnumerationExam Preparation TasksReview All Key TopicsDefine Key TermsQ&A
Chapter 9 Reporting and Communication
“Do I Know This Already?” QuizFoundation TopicsComparing and Contrasting Important Components of Written ReportsAnalyzing the Findings and Recommending the Appropriate Remediation Within a ReportExplaining the Importance of Communication During the Penetration Testing ProcessExplaining Post-Report Delivery ActivitiesExam Preparation TasksReview All Key TopicsDefine Key TermsQ&A
Chapter 10 Tools and Code Analysis
“Do I Know This Already?” QuizFoundation TopicsUnderstanding the Basic Concepts of Scripting and Software DevelopmentUnderstanding the Different Use Cases of Penetration Testing Tools and Analyzing Exploit CodeExam Preparation TasksReview All Key TopicsDefine Key TermsQ&A
Chapter 11 Final Preparation
Tools for Final PreparationSuggested Plan for Final Review/StudySummary
Glossary of Key Terms
Appendix A Answers to the “Do I Know This Already?” Quizzes and Q&A Sections
Appendix B CompTIA® PenTest+ PT0-002 Cert Guide Exam Updates
Index
Appendix C Study Planner
Where are the companion content files? - Register
Inside Front Cover
Inside Back Cover
Code Snippets

Content preview from CompTIA PenTest+ PT0-002 Cert Guide, 2nd Edition

Chapter 1 Introduction to Ethical Hacking and Penetration Testing

This chapter covers the following topics related to Objective 1.1 (Compare and contrast governance, risk, and compliance concepts.) and Objective 1.2 (Explain the importance of scoping and organizational/customer requirements.) of the CompTIA PenTest+ PT0-002 certification exam:

Permission to attack
Standards and methodologies
- MITRE AT T&CK
- Open Web Application Security Project (OWASP)
- National Institute of Standards and Technology (NIST)
- Open Source Security Testing Methodology Manual (OSSTMM)
- Penetration Testing Execution Standard (PTES)
- Information Systems Security Assessment Framework (ISSAF)
Environmental Considerations
- Network
- Application
- Cloud

Before we jump into ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9780137566204

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

CompTIA PenTest+ PT0-002 Cert Guide, 2nd Edition

by Omar Santos

Chapter 1

Introduction to Ethical Hacking and Penetration Testing

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.