CompTIA PenTest+ Practice Test 1

Practice Test 1 is a fixed 30-question set drawn from our CompTIA PenTest+ (PT0-003) pool, balanced across all 5 exam domains. Every item is original — written to the public PT0-003 objectives, never copied from a real exam — and each answer is fully explained with cited sources. It is untimed, so you can stop on any question and read the reasoning before moving on.

Domain coverage

• Engagement Management — 4 questions
• Reconnaissance and Enumeration — 6 questions
• Vulnerability Discovery and Analysis — 5 questions
• Attacks and Exploits — 11 questions
• Post-exploitation and Lateral Movement — 4 questions

Objectives covered: 1.1 Pre-engagement activities (rules of engagement); 1.1 Pre-engagement activities (scope definition; target selection); 1.1 Pre-engagement activities (shared responsibility model); 2.1 Active vs passive reconnaissance; 2.1 Active vs passive reconnaissance (DNS/WHOIS); 2.1 Active vs passive reconnaissance (OSINT); 2.1 Active vs passive reconnaissance (OSINT; protocol scanning); 2.1 Active vs passive reconnaissance (certificate transparency); 2.1 Active vs passive reconnaissance (network sniffing); 3.1 Vulnerability scans (SAST vs DAST); 3.1 Vulnerability scans (SAST vs DAST; web app scanners); 3.1 Vulnerability scans (authenticated vs unauthenticated); 3.1 Vulnerability scans (authenticated vs unauthenticated; credentialed scanning); 3.1 Vulnerability scans (credentialed scanning; troubleshooting scan configs); and more.