FirstTry
PT0-003CompTIA PenTest+

Practice Exam 1

5 of this form’s 90 questions, drawn from across its domains, free. The explanation on every one of them is free too, at every tier, and always will be.

  1. Question 1 of 5

    Vulnerability Discovery and Analysis

    You are choosing an nmap script category for the first pass of an engagement, before any exploitation. What do discovery scripts do?

  2. Question 2 of 5

    Attacks and Exploits

    You test an LLM-backed support chatbot. You submit text that makes it ignore its system instructions and disclose hidden data. Which OWASP LLM risk did you exploit?

  3. Question 3 of 5

    Post-exploitation and Lateral Movement

    You have code execution on a public web server and drop a script that answers your HTTP requests with a shell. What is this?

  4. Question 4 of 5

    Reconnaissance and Enumeration

    A script has:

    Shell
    nmap -Pn 10.0.0.5 || echo "scan failed" >> errors.log

    Under what condition is the failure logged?

  5. Question 5 of 5

    Engagement Management

    What is MITRE ATT&CK?

0 of 90 completed

0%

The other 85 questions are the rest of this form: same 165 minute clock, same 750 cut score, and the same explanation on every question, which is never behind the wall. Practice Exam 1 of 2 on PenTest+.

What this exam covers

  • Engagement Management12 questions / 13% of the exam
  • Reconnaissance and Enumeration19 questions / 21% of the exam
  • Vulnerability Discovery and Analysis15 questions / 17% of the exam
  • Attacks and Exploits31 questions / 35% of the exam
  • Post-exploitation and Lateral Movement13 questions / 14% of the exam

Checking what you already have access to.

Every question is original, written from the published objectives. We never reproduce, paraphrase, or imitate real exam content, and neither should anything else you study from.