CompTIA Penetration Tester+ (PenTest+) Certification

Security remains one of the hottest topics in IT and other industries. It seems that each week brings news of some new breach of privacy or security. As organizations scramble to protect themselves and their customers, the ability to conduct penetration testing is an emerging skill set that is becoming ever more valuable to the organizations seeking protection, and ever more lucrative for those who possess these skills. In this course, you will be introduced to some general concepts and methodologies related to pen testing, and you will work your way through a simulated pen test for a fictitious company.

Použijte Microsoft Software Assurance Training Vouchers

CÍLOVÁ SKUPINA

This course is designed for IT professionals who want to develop penetration testing skills to enable them to identify information-system vulnerabilities and effective remediation techniques for those vulnerabilities. Target students who also need to offer practical recommendations for action to properly protect information systems and their contents will derive those skills from this course. This course is also designed for individuals who are preparing to take the CompTIA PenTest+ certification exam PT0-001, or who plan to use PenTest+ as the foundation for more advanced security certifications or career roles. Individuals seeking this certification should have three to four years of hands-on experience performing penetration tests, vulnerability assessments, and vulnerability management.

TÉMATA KURZU

After completing this course, you will be able to plan, conduct, analyze, and report on penetration tests, including the ability to… Plan and scope penetration tests Conduct passive reconnaissance Perform non-technical tests to gather information Conductive active reconnaissance Analyze vulnerabilities Penetrate networks Exploit host-based vulnerabilities Test applications Complete post-exploit tasks Analyze and report pen test results

OSNOVA KURZU

1 - PLANNING AND SCOPING PENETRATION TESTS

Introduction to Penetration Testing Concepts Plan a Pen Test Engagement Scope and Negotiate a Pen Test Engagement Prepare for a Pen Test Engagement

2 - CONDUCTING PASSIVE RECONNAISSANCE

Gather Background Information Prepare Background Findings for Next Steps

3 - PERFORMING NON-TECHNICAL TESTS

Perform Social Engineering Tests Perform Physical Security Tests on Facilities

4 - CONDUCTING ACTIVE RECONNAISSANCE

Scan Networks Enumerate Targets Scan for Vulnerabilities Analyze Basic Scripts

5 - ANALYZING VULNERABILITIES

Analyze Vulnerability Scan Results Leverage Information to Prepare for Exploitation

6 - PENETRATING NETWORKS

Exploit Network-Based Vulnerabilities Exploit Wireless and RF-Based Vulnerabilities Exploit Specialized Systems

7 - EXPLOITING HOST-BASED VULNERABILITIES

Exploit Windows-Based Vulnerabilities Exploit *nix-Based Vulnerabilities

8 - TESTING APPLICATIONS

Exploit Web Application Vulnerabilities Test Source Code and Compiled Apps

9 - COMPLETING POST-EXPLOIT TASKS

Use Lateral Movement Techniques Use Persistence Techniques Use Anti-Forensics Techniques

10 - ANALYZING AND REPORTING PEN TEST RESULTS

Analyze Pen Test Data Develop Recommendations for Mitigation Strategies Write and Handle Reports Conduct Post-Report-Delivery Activities