CompTIA PenTest+
Certification
Exam Objectives
EXAM NUMBER: PT0-002

About the Exam
Candidates are encouraged to use this document to help prepare for the CompTIA
PenTest+ (PT0-002) certification exam. The CompTIA PenTest+ certification exam willverify the successful candidate has the knowledge and skills required to:• Plan and scope a penetration testing engagement• Understand legal and compliance requirements• Perform vulnerability scanning and penetration testing using appropriate
tools and techniques, and then analyze the results• Produce a written report containing proposed remediation techniques, effectively
communicate results to the management team, and provide practical recommendations
This is equivalent to three to four years of hands-on experience working
in a security consultant or penetration tester job role.
These content examples are meant to clarify the test objectives and should not be
construed as a comprehensive listing of all the content of this examination.
EXAM ACCREDITATIONThe CompTIA PenTest+ (PT0-002) exam is accredited by ANSI to show compliance with the ISO 17024
standard and, as such, undergoes regular reviews and updates to the exam objectives.
EXAM DEVELOPMENT
CompTIA exams result from subject-matter expert workshops and industry-wide survey
results regarding the skills and knowledge required of an IT professional.
CompTIA AUTHORIZED MATERIALS USE POLICY
CompTIA Certifications, LLC is not affiliated with and does not authorize, endorse, or condone utilizing any
content provided by unauthorized third-party training sites (aka “brain dumps”). Individuals who utilize
such materials in preparation for any CompTIA examination will have their certifications revoked and besuspended from future testing in accordance with the CompTIA Candidate Agreement. In an effort to moreclearly communicate CompTIA’s exam policies on use of unauthorized study materials, CompTIA directs
all certification candidates to the CompTIA Certification Exam Policies. Please review all CompTIA policies
before beginning the study process for any CompTIA exam. Candidates will be required to abide by the
CompTIA Candidate Agreement. If a candidate has a question as to whether study materials are considered
unauthorized (aka “brain dumps”), he/she should contact CompTIA at examsecurity@comptia.org to confirm.
PLEASE NOTE
The lists of examples provided in bulleted format are not exhaustive lists. Other examples oftechnologies, processes, or tasks pertaining to each objective may also be included on the exam
although not listed or covered in this objectives document. CompTIA is constantly reviewing thecontent of our exams and updating test questions to be sure our exams are current, and the securityof the questions is protected. When necessary, we will publish updated exams based on existing
exam objectives. Please know that all related exam preparation materials will still be valid.

CompTIA PenTest+ Certification Exam Objectives 7.0 (Exam Number: PT0-002)

TEST DETAILS
Required exam

PT0-002

Number of questions

Maximum of 85

Types of questions

Multiple-choice and performance-based

Length of test

165 minutes

Recommended experience 3–4 years of hands-on experience performing
penetration tests, vulnerability assessments,
and code analysis
Passing score

750 (on a scale of 100-900)

EXAM OBJECTIVES (DOMAINS)
The table below lists the domains measured by this examinationand the extent to which they are represented.

DOMAINPERCENTAGE OF EXAMINATION

1.0 Planning and Scoping
2.0 Information Gathering and Vulnerability Scanning
3.0 Attacks and Exploits
4.0 Reporting and Communication
5.0 Tools and Code Analysis

14%
22%
30%
18%
16%

Total

100%

CompTIA PenTest+ Certification Exam Objectives 7.0 (Exam Number: PT0-002)

1.0 Planning and Scoping
1.1

Compare and contrast governance, risk, and compliance concepts.
• Regulatory compliance considerations- Payment Card Industry Data
Security Standard (PCI DSS)- General Data Protection
Regulation (GDPR)• Location restrictions- Country limitations

1.2- Statement of work
- Non-disclosure agreement (NDA)- Master service agreement• Permission to attack

Explain the importance of scoping andorganizational/customer requirements.
• Standards and methodologies- MITRE ATT&CK- Open Web Application
Security Project (OWASP)- National Institute of Standards
and Technology (NIST)- Open-source Security Testing
Methodology Manual (OSSTMM)- Penetration Testing
Execution Standard (PTES)- Information Systems Security
Assessment Framework (ISSAF)

1.3- Tool restrictions- Local laws
- Local government requirements
		 - Privacy requirements• Legal concepts- Service-level agreement (SLA)- Confidentiality• Rules of engagement- Time of day- Types of allowed/disallowed tests- Other restrictions• Environmental considerations- Network- Application- Cloud• Target list/in-scope assets- Wireless networks- Internet Protocol (IP) ranges- Domains- Application programming
interfaces (APIs)- Physical locations- Domain name system (DNS)- External vs. internal targets- First-party vs. third-party hosted• Validate scope of engagement- Question the client/review contracts- Time management- Strategy
		 - Unknown-environment vs.
		
known-environment testing

Given a scenario, demonstrate an ethical hacking mindset
by maintaining professionalism and integrity.
• Background checks ofpenetration testing team
• Adhere to specific scope of engagement• Identify criminal activity• Immediately report breaches/
criminal activity• Limit the use of tools to aparticular engagement• Limit invasiveness based on scope• Maintain confidentialityof data/information

CompTIA PenTest+ Certification Exam Objectives 7.0 (Exam Number: PT0-002)• Risks to the professional- Fees/fines- Criminal charges

2.0 Information Gatheringand Vulnerability Scanning
2.1

Given a scenario, perform passive reconnaissance.
• DNS lookups• Identify technical contacts• Administrator contacts• Cloud vs. self-hosted• Social media scraping- Key contacts/job responsibilities- Job listing/technology stack• Cryptographic flaws- Secure Sockets Layer (SSL) certificates- Revocation

2.2• Company reputation/security posture• Data- Password dumps- File metadata- Strategic search engine
analysis/enumeration- Website archive/caching- Public source-code repositories• Open-source intelligence (OSINT)- Tools		 - Shodan
		 - Recon-ng- Sources
		 - Common weakness
		
enumeration (CWE)		 - Common vulnerabilities		and exposures (CVE)

Given a scenario, perform active reconnaissance.
• Enumeration- Hosts- Services- Domains- Users- Uniform resource locators (URLs)• Website reconnaissance- Crawling websites- Scraping websites- Manual inspection of web links
		- robots.txt• Packet crafting- Scapy• Defense detection- Load balancer detection- Web application firewall(WAF) detection- Antivirus- Firewall• Tokens- Scoping- Issuing- Revocation

CompTIA PenTest+ Certification Exam Objectives 7.0 (Exam Number: PT0-002)• Wardriving• Network traffic- Capture API requests and responses- Sniffing• Cloud asset discovery• Third-party hosted services• Detection avoidance2.0 Information Gathering and Vulnerability Scanning
2.3

Given a scenario, analyze the results of a reconnaissance exercise.
• Fingerprinting- Operating systems (OSs)- Networks- Network devices- Software• Analyze output from:- DNS lookups- Crawling websites

2.4- Network traffic- Address Resolution
Protocol (ARP) traffic- Nmap scans- Web logs

Given a scenario, perform vulnerability scanning.
• Considerations of vulnerability scanning- Time to run scans- Protocols- Network topology- Bandwidth limitations- Query throttling- Fragile systems- Non-traditional assets• Scan identified targets for vulnerabilities• Set scan settings to avoid detection• Scanning methods- Stealth scan
- Transmission Control
Protocol (TCP) connect scan
- Credentialed vs. non-credentialed• Nmap- Nmap Scripting Engine (NSE) scripts- Common options
		 -A		 -sV		 -sT		 -Pn		 -O		 -sU		 -sS		 -T 1-5
		 -script=vuln		 -p• Vulnerability testing toolsthat facilitate automation

CompTIA PenTest+ Certification Exam Objectives 7.0 (Exam Number: PT0-002)

3.0 Attacks and Exploits
3.1

Given a scenario, research attack vectors and perform network attacks.
• Stress testing for availability• Exploit resources- Exploit database (DB)- Packet storm• Attacks- ARP poisoning- Exploit chaining- Password attacks
		 - Password spraying
		 - Hash cracking
		 - Brute force		 - Dictionary- On-path (previously known
as man-in-the-middle)- Kerberoasting

3.2- DNS cache poisoning- Virtual local area network(VLAN) hopping- Network access control (NAC) bypass- Media access control (MAC) spoofing- Link-Local Multicast Name
Resolution (LLMNR)/NetBIOSName Service (NBT-NS) poisoning- New Technology LAN Manager(NTLM) relay attacks• Tools- Metasploit- Netcat- NmapGiven a scenario, research attack vectors and perform wireless attacks.
• Attack methods- Eavesdropping- Data modification- Data corruption- Relay attacks- Spoofing- Deauthentication- Jamming- Capture handshakes- On-path• Attacks- Evil twin

- Captive portal- Bluejacking- Bluesnarfing- Radio-frequency identification(RFID) cloning- Bluetooth Low Energy (BLE) attack- Amplification attacks [Nearfield communication (NFC)]- WiFi protected setup (WPS) PIN attack• Tools- Aircrack-ng suite- Amplified antenna

CompTIA PenTest+ Certification Exam Objectives 7.0 (Exam Number: PT0-002)

3.0 Attacks and Exploits
3.3

Given a scenario, research attack vectors andperform application-based attacks.
• OWASP Top 10• Server-side request forgery• Business logic flaws• Injection attacks- Structured Query Language(SQL) injection
		 - Blind SQL		 - Boolean SQL		 - Stacked queries- Command injection- Cross-site scripting		- Persistent		- Reflected- Lightweight Directory AccessProtocol (LDAP) injection

3.4• Application vulnerabilities- Race conditions- Lack of error handling- Lack of code signing- Insecure data transmission- Session attacks
		 - Session hijacking
		 - Cross-site request forgery (CSRF)
		 - Privilege escalation
		 - Session replay
		 - Session fixation• API attacks- Restful- Extensible Markup LanguageRemote Procedure Call (XML-RPC)- SoapGiven a scenario, research attack vectors andperform attacks on cloud technologies.
• Attacks- Credential harvesting- Privilege escalation- Account takeover- Metadata service attack- Misconfigured cloud assets
		 - Identity and access		
management (IAM)		 - Federation misconfigurations
		 - Object storage
		 - Containerization technologies- Resource exhaustion- Cloud malware injection attacks- Denial-of-service attacks- Side-channel attacks- Direct-to-origin attacks• Tools- Software development kit (SDK)

CompTIA PenTest+ Certification Exam Objectives 7.0 (Exam Number: PT0-002)• Directory traversal• Tools- Web proxies
		 - OWASP Zed Attack Proxy (ZAP)		 - Burp Suite community edition- SQLmap- DirBuster• Resources- Word lists

3.0 Attacks and Exploits
3.5

Explain common attacks and vulnerabilities
against specialized systems.
• Mobile- Attacks
		 - Reverse engineering		 - Sandbox analysis
		- Spamming- Vulnerabilities
		 - Insecure storage
		 - Passcode vulnerabilities
		 - Certificate pinning		 - Using known
		vulnerable components
		 (i) Dependency vulnerabilities
		 (ii) Patching fragmentation
		 - Execution of activities using root		 - Over-reach of permissions
		 - Biometrics integrations
		 - Business logic vulnerabilities- Tools		 - Burp Suite
		- Drozer
		 - Mobile Security Framework (MobSF)
		- Postman
		- Ettercap
		- Frida

3.6

		 - Objection		 - Android SDK tools		 - ApkX		 - APK Studio• Internet of Things (IoT) devices- BLE attacks- Special considerations
		 - Fragile environment		 - Availability concerns		 - Data corruption		 - Data exfiltration- Vulnerabilities		 - Insecure defaults		 - Cleartext communication		 - Hard-coded configurations
		 - Outdated firmware/hardware		 - Data leakage
		 - Use of insecure or		outdated components• Data storage system vulnerabilities- Misconfigurations—on-premises
and cloud-based		- Default/blank		
username/password

		 - Network exposure- Lack of user input sanitization- Underlying software vulnerabilities- Error messages and debug handling- Injection vulnerabilities		 - Single quote method• Management interface vulnerabilities- Intelligent platform
management interface (IPMI)• Vulnerabilities related to supervisory
control and data acquisition (SCADA)/
Industrial Internet of Things (IIoT)/
industrial control system (ICS)• Vulnerabilities related tovirtual environments- Virtual machine (VM) escape- Hypervisor vulnerabilities- VM repository vulnerabilities• Vulnerabilities related tocontainerized workloads

Given a scenario, perform a social engineering or physical attack.
• Pretext for an approach• Social engineering attacks- Email phishing		 - Whaling		 - Spear phishing- Vishing- Short message service (SMS) phishing- Universal Serial Bus (USB) drop key- Watering hole attack• Physical attacks- Tailgating- Dumpster diving- Shoulder surfing- Badge cloning• Impersonation• Tools- Browser exploitation
framework (BeEF)

CompTIA PenTest+ Certification Exam Objectives 7.0 (Exam Number: PT0-002)- Social engineering toolkit- Call spoofing tools• Methods of influence- Authority- Scarcity- Social proof- Urgency- Likeness- Fear3.0 Attacks and Exploits
3.7

Given a scenario, perform post-exploitation techniques.
• Post-exploitation tools- Empire- Mimikatz- BloodHound• Lateral movement- Pass the hash
• Network segmentation testing• Privilege escalation- Horizontal- Vertical• Upgrading a restrictive shell• Creating a foothold/persistence- Trojan- Backdoor		 - Bind shell		 - Reverse shell- Daemons- Scheduled tasks• Detection avoidance- Living-off-the-land
techniques/fileless malware		 - PsExec
		 - Windows Management
		
Instrumentation (WMI)		 - PowerShell (PS) remoting/Windows		
Remote Management (WinRM)- Data exfiltration- Covering your tracks- Steganography- Establishing a covert channel• Enumeration- Users- Groups- Forests- Sensitive data
- Unencrypted files

CompTIA PenTest+ Certification Exam Objectives 7.0 (Exam Number: PT0-002)

4.0 Reporting and Communication
4.1

Compare and contrast important components of written reports.
• Report audience- C-suite- Third-party stakeholders- Technical staff- Developers• Report contents (** notin a particular order)- Executive summary- Scope details- Methodology
		 - Attack narrative

4.2- Findings
		 - Risk rating (reference framework)		 - Risk prioritization		 - Business impact analysis- Metrics and measures- Remediation- Conclusion- Appendix• Storage time for report• Secure distribution• Note taking- Ongoing documentation during test
- Screenshots• Common themes/root causes- Vulnerabilities- Observations- Lack of best practices

Given a scenario, analyze the findings and recommend
the appropriate remediation within a report.
• Technical controls- System hardening- Sanitize user input/
parameterize queries- Implemented multifactor
authentication- Encrypt passwords- Process-level remediation- Patch management- Key rotation- Certificate management- Secrets management solution- Network segmentation• Administrative controls- Role-based access control- Secure softwaredevelopment life cycle- Minimum password requirements- Policies and procedures

CompTIA PenTest+ Certification Exam Objectives 7.0 (Exam Number: PT0-002)• Operational controls- Job rotation- Time-of-day restrictions- Mandatory vacations- User training• Physical controls- Access control vestibule- Biometric controls- Video surveillance4.0 Reporting and Communication
4.3

Explain the importance of communication
during the penetration testing process.
• Communication path
- Primary contact- Technical contact- Emergency contact• Communication triggers- Critical findings- Status reports- Indicators of prior compromise• Reasons for communication- Situational awareness- De-escalation

4.4- Deconfliction- Identifying false positives- Criminal activity• Goal reprioritization• Presentation of findings

Explain post-report delivery activities.
• Post-engagement cleanup- Removing shells- Removing tester-created credentials- Removing tools• Client acceptance• Lessons learned• Follow-up actions/retest• Attestation of findings• Data destruction process

CompTIA PenTest+ Certification Exam Objectives 7.0 (Exam Number: PT0-002)

5.0 Tools and Code Analysis
5.1

Explain the basic concepts of scripting and software development.
• Logic constructs- Loops- Conditionals- Boolean operator- String operator- Arithmetic operator• Data structures- JavaScript Object Notation (JSON)- Key value- Arrays

5.2- Dictionaries- Comma-separated values (CSV)- Lists- Trees• Libraries• Classes• Procedures• Functions

Given a scenario, analyze a script or code
sample for use in a penetration test.
• Shells- Bash- PS• Programming languages- Python- Ruby- Perl- JavaScript• Analyze exploit code to:- Download files- Launch remote access- Enumerate users- Enumerate assets• Opportunities for automation- Automate penetration testing process		 - Perform port scan and then		
automate next		steps based on results
		 - Check configurations
		and produce a report- Scripting to modify IP addresses
during a test
- Nmap scripting to enumerateciphers and produce reports

CompTIA PenTest+ Certification Exam Objectives 7.0 (Exam Number: PT0-002)

5.0 Tools and Code Analysis
5.3

Explain use cases of the following tools during
the phases of a penetration test.
(**The intent of this objective is NOT to test specific vendor feature sets.)• Scanners- Nikto- Open vulnerability assessment
scanner (Open VAS)
- SQLmap- Nessus- Open Security Content
Automation Protocol (SCAP)- Wapiti- WPScan- Brakeman- Scout Suite• Credential testing tools- Hashcat- Medusa- Hydra- CeWL- John the Ripper- Cain- Mimikatz- Patator- DirBuster• Debuggers- OllyDbg- Immunity Debugger- GNU Debugger (GDB)- WinDbg- Interactive Disassembler (IDA)- Covenant- SearchSploit• OSINT- WHOIS- Nslookup- Fingerprinting Organization
with Collected Archives (FOCA)- theHarvester- Shodan- Maltego- Recon-ng- Censys• Wireless- Aircrack-ng suite- Kismet- Wifite2- Rogue access point- EAPHammer- mdk4- Spooftooph- Reaver- Wireless Geographic
Logging Engine (WiGLE)- Fern• Web application tools- OWASP ZAP- Burp Suite- Gobuster- w3af• Social engineering tools- Social Engineering Toolkit (SET)- BeEF• Remote access tools- Secure Shell (SSH)

CompTIA PenTest+ Certification Exam Objectives 7.0 (Exam Number: PT0-002)- Ncat- Netcat- ProxyChains• Networking tools- Wireshark- Hping• Misc.
- SearchSploit- Responder- Impacket tools- Empire- Metasploit- mitm6- CrackMapExec- TruffleHog- Censys• Steganography tools- Openstego- Steghide- Snow- Coagula- Sonic Visualiser- TinEye• Cloud tools- Scout Suite- CloudBrute- Pacu- Cloud Custodian

PenTest+ (PT0-002) Acronym List
The following is a list of acronyms that appear on the CompTIA PenTest+ exam.
Candidates are encouraged to review the complete list and attain a working
knowledge of all listed acronyms as part of a comprehensive exam
preparation program.
ACRONYM

SPELLED OUTACRONYM

SPELLED OUT

AAA
ACL
AES
AP
API
APT
ARP
AS2
BeEF
BLE
BSSID
CA
CAPEC

Authentication, Authorization and Accounting
Access Control List
Advanced Encryption Standard
Access Point
Application Programming Interface
Advanced Persistent Threat
Address Resolution Protocol
Applicability Statement 2
Browser Exploitation Framework
Bluetooth Low Energy
Basic Service Set IdentifiersCertificate Authority
Common Attack Pattern
Enumeration and Classification
Command-Line Interface
Cross-Site Request Forgery
Comma-Separated Values
Common Vulnerabilities and Exposures
Common Vulnerability Scoring Systems
Common Weakness Enumeration
Database
Distributed Denial-of-Service
Dynamic Host Configuration Protocol
Dynamic Link Library
Data Loss Prevention
Domain Name System
Domain Name System Security Extensions
Extensible Authentication Protocol
Fingerprinting Organization with
Collected Archives
File Transfer Protocol
File Transfer Protocol Secure
GNU Debugger
General Data Protection Regulation
Graphics Processing Unit
Hypertext Transfer Protocol
Hypertext Transfer Protocol Secure

IaaS
IAM
ICMP
ICS
IDA
IDS
IIoT
IMEIs
IoT
IP
IPMI
IPS
ISO
ISP
ISSAF

Infrastructure as a Service
Identity and Access Management
Internet Control Message Protocol
Industrial Control System
Interactive Disassembler
Intrusion Detection System
Industrial Internet of Things
International Mobile Equipment Identity
Internet of Things
Internet Protocol
Intelligent Platform Management Interface
Intrusion Prevention System
International Organization for Standardization
Internet Service Provider
Information Systems Security
Assessment Framework
JavaScript Object Notation
Local Area Network
Lightweight Directory Access Protocol
Link-Local Multicast Name Resolution
Local Security Authority Subsystem Service
Media Access Control
Mobile Device Management
Mobile Security Framework
Memorandum of Understanding
Master Service Agreement
Mail Exchange
Network Access Control
NetBIOS Name Service
Non-disclosure Agreement
Near-Field Communication
National Institute of Standards and Technology
National Institute of Standards
and Technology Special Publication
Name Server
Nmap Scripting Engine
New Technology LAN Manager

CLI
CSRF
CSV
CVE
CVSS
CWE
DB
DDoS
DHCP
DLL
DLP
DNS
DNSSEC
EAP
FOCA
FTP
FTPS
GDB
GDPR
GPU
HTTP
HTTPS

CompTIA PenTest+ Certification Exam Objectives 7.0 (Exam Number: PT0-002)

JSON
LAN
LDAP
LLMNR
LSASS
MAC
MDM
MobSF
MOU
MSA
MX
NAC
NBT-NSNDA
NFC
NISTNIST SP
NS
NSE
NTLM

ACRONYM

SPELLED OUTACRONYM

SPELLED OUT

NTP
OS
OSINT
OSSTMM

Network Time Protocol
Operating System
Open-source Intelligence
Open-source Security Testing
Methodology Manual
Open Web Application Security Project
Password-Based Key Deviation Function 2
Payment Card Industry Data Security Standard
PHP: Hypertext Preprocessor
Personal Identifiable Information
Public Key Infrastructure
Programmable Logic Controller
PowerShell
Pre-Shared Key
Penetration Testing Execution Standard
Remote Access Trojan
Remote Desktop Protocol
Radio Frequency
Request for Comment
Radio-Frequency Identification
Rules of Engagement
Supervisory Control and Data Acquisition
Security Content Automation Protocol
Software Development Kit
Software Development Life Cycle
Software-defined RadioSocial Engineering Toolkit
Set Group ID
Security Information and Event Management
Session Initiation Protocol
Service-level Agreement
Server Message Block
Secure/Multipurpose Internet Mail Extensions
Short Message Service
Simple Mail Transfer Protocol
Simple Network Management Protocol
Security Operations Center
Statement of Work
Structured Query Language
Solid-State Drive
Secure Shell
Solid-State Hybrid Drive
Service Set Identifier
Secure Sockets Layer
Single Sign-On
Set User ID
Transmission Control Protocol
Temporal Key Integrity Protocol
Transport Layer Security
Time to Live
Tactics, Techniques and Procedures
User Datagram Protocol

URL
URI
USB
UTF
VAS
VLAN
VM
VoIP
VPN
VPS
WAF
WEP
WiGLE
WinRM
WMI
WPA
WPS
XML-RPC

Uniform Resource Locator
Uniform Resource Identifier
Universal Serial Bus
Unicode Transformation Format
Vulnerability Assessment Scanner
Virtual Local Area Network
Virtual Machine
Voice over Internet Protocol
Virtual Private Network
Virtual Private Server
Web Application Firewall
Wired Equivalent Privacy
Wireless Geographic Logging Engine
Windows Remote Management
Windows Management Instrumentation
Wi-Fi Protected Access
Wi-Fi Protected Setup
Extensible Markup Language-Remote
Procedure Call
Cross-Site Scripting
Zed Attack ProxyOWASPPBKDF2
PCI DSS
PHP
PII
PKI
PLC
PS
PSK
PTES
RAT
RDP
RF
RFC
RFID
ROE
SCADA
SCAP
SDK
SDLC
SDR
SET
SGID
SIEM
SIP
SLA
SMB
S/MIME
SMS
SMTP
SNMP
SOC
SOW
SQL
SSD
SSH
SSHD
SSID
SSL
SSO
SUID
TCP
TKIP
TLS
TTL
TTPs
UDP

CompTIA PenTest+ Certification Exam Objectives 7.0 (Exam Number: PT0-002)

XSS
ZAP

PenTest+ Proposed Hardware and Software List
CompTIA has included this sample list of hardware and software to assist
candidates as they prepare for the PenTest+ exam. This list may also be helpful fortraining companies that wish to create a lab component to their training offering.
The bulleted lists below each topic are sample lists and are not exhaustive.

EQUIPMENTSPARE HARDWARE• Laptops• Wireless access points• Servers• Graphics processing units (GPUs)• Switches• Cabling• Monitors• Firewalls• HID/door access controls• Wireless adapters capableof packet injection• Directional antenna• Mobile device• IoT equipment (cameras,
Raspberry Pi, smart TV, etc.)• Bluetooth adapter• Access to cloud environment- Command-line interface (CLI) access- Management console access- Instances of cloud services• Multifunction printers (wired/wireless enabled)• Domain joined printer• RFID readers• Biometric device• Programmable logic controller- Software-defined radio (SDR) kit• USB flash drives- Weaponized USB drive• Cables• Keyboards• Mouse• Power supplies• Dongles/adapters
SPARE PARTS• HDMI cables• Spare hard drives• Spare monitors• Wireless testing tools• Web proxying tools• Social engineering tools• Remote access tools• Network tools• Mobility testing tools• Security information and event
management (SIEM)/intrusion
detection system (IDS)/intrusion
prevention system (IPS)• Command and control tools• Detection and avoidance tools

TOOLS• Lock pick kit• Badge cloner• Fingerprint lifter• Nail polish (to mask fingerprints)
SOFTWARE• OS licensing• Open-source OS• Penetration testing frameworks• VM software• Scanning tools• Credential testing tools- Spraying tools- Password crackers• Debuggers• Fuzzing tools• Software assurance tools© 2020 CompTIA, Inc., used under license by CompTIA, Inc. All rights reserved. All certification programs and education related to such programs are operated
exclusively by CompTIA, Inc. CompTIA is a registered trademark of CompTIA, Inc. in the U.S. and internationally. Other brands and company names mentioned
herein may be trademarks or service marks of CompTIA, Inc. or of their respective owners. Reproduction or dissemination prohibited without the written consent
of CompTIA, Inc. Printed in the U.S. 08301-Nov2020