344 practice questions for CompTIA PenTest+ (PT0-003), MCQs and PBQs, with full explanations.
Every multiple choice and performance-based question comes with the correct answer, a clear explanation, and a note on why each other option is wrong. Mapped to the current PT0-003 objectives.
- 344 questions, MCQs and PBQs, mapped to the PT0-003 objectives
- Answers and explanations for every question, including the wrong options
- A questions-only PDF for timed practice runs
- Instant delivery by email the moment you check out
- Free monthly updates for as long as the exam is live
- Pass or your money back
A PenTest+ voucher is US$439. This pack is US$39, paid once.
Try 10 questions free before you buy.
Last updated September 2026 · 344 questions
What makes the PenTest+ hard
Fail it and CompTIA charges the full US$439 again. The PBQs are the main reason people do: you read tool output, interpret code and make testing decisions against the clock, across 165 minutes. Knowing Nmap and Metasploit well does not guarantee you will read CompTIA’s scenarios the way the exam expects.
PT0-003 is also recent. It launched on 17 December 2024 and replaced PT0-002, which retired on 17 June 2025. The new version added AI-based attacks, more cloud and API exploitation, and newer post-exploitation techniques, so study material written before the launch can miss what is on the exam today.
Weighting is lopsided: attacks and exploits alone is 35%, and reconnaissance and enumeration adds another 21%. More than half the exam sits in those two domains, and this pack covers both in depth.
About the exam
PenTest+ is CompTIA’s intermediate penetration testing certification. It validates planning, scoping and running engagements across networks, cloud, web applications, IoT and hybrid environments, through the full lifecycle from planning and reconnaissance to exploitation, post-exploitation and reporting. The current version is V3, exam code PT0-003, launched 17 December 2024. It is DoD 8140 approved. CompTIA recommends 3 to 4 years in a penetration testing role, plus Network+ and Security+ or equivalent knowledge.
Exam domains
- Engagement management: 13%
- Reconnaissance and enumeration: 21%
- Vulnerability discovery and analysis: 17%
- Attacks and exploits: 35%
- Post-exploitation and lateral movement: 14%
Up to 90 questions including PBQs, 165 minutes, pass mark 750 out of 900, US$439 per voucher, offered in English, French, Japanese and Portuguese, at a Pearson VUE centre or online, valid for three years.
Reviews
There are no reviews yet.