PenTest+ PT0-003
The PenTest+ PT0-003 exam covers the full penetration-testing lifecycle across five domains. Attacks and Exploits is the single heaviest at 35%, but Engagement Management — scoping, rules of engagement, and the remediation advice in the report — is what separates a professional pentester from a script runner.
3 practice exams free — no signup needed
Pre-engagement activities, scoping and rules of engagement, legal and ethical boundaries, collaboration with the client, and writing the report with remediation recommendations.
Passive and active information gathering, OSINT, host and service discovery, and enumeration of networks, web applications, cloud assets, and users.
Selecting and running vulnerability scans, static and dynamic application analysis, and validating and prioritizing findings.
The largest domain: network, wireless, application, cloud, mobile, IoT, and social-engineering attacks, plus the scripting and tooling that run them.
Persistence, privilege escalation, lateral movement, data exfiltration, staging, and cleaning up after the engagement.
Five: Engagement Management (13%), Reconnaissance and Enumeration (21%), Vulnerability Discovery and Analysis (17%), Attacks and Exploits (35%), and Post-exploitation and Lateral Movement (14%). PT0-003 replaced PT0-002's Planning and Scoping / Tools and Code Analysis domains when it launched in December 2024.
Attacks and Exploits at 35%. It's the technical core of the exam, but Engagement Management (13%) covers scoping, rules of engagement, and the report — the part real engagements are judged on, so don't skip it.
552 questions across 25 exams, weighted to match the PT0-003 domains above. 3 free — no signup.
Start Free Practice Test