CompTIA PenTest+ PT0-001 Cert Guide, 1st edition

  • Omar Santos, 
  • Ron Taylor

Your access includes:

  • Search, highlight, and take notes
  • Easily create flashcards
  • Use the app for access anywhere
  • 14-day refund guarantee

$10.99per month

4-month term, pay monthly or pay $43.96

Learn more, spend less

  • Listen on the go

    Learn how you like with full eTextbook audio

  • Special partners and offers

    Enjoy perks from special partners and offers for students

  • Find it fast

    Quickly navigate your eTextbook with search

  • Stay organized

    Access all your eTextbooks in one place

  • Easily continue access

    Keep learning with auto-renew


    Introduction xxiii
Chapter 1 Introduction to Ethical Hacking and Penetration Testing 3
    “Do I Know This Already?” Quiz 3
    Understanding Ethical Hacking and Penetration Testing 6
    Understanding the Current Threat Landscape 7
    Exploring Penetration Testing Methodologies 10
    Building Your Own Lab 16
    Requirements and Guidelines for Penetration Testing Labs 18
    What Tools Should You Use in Your Lab? 18
    What if You Break Something? 19
    Review All Key Topics 20
    Define Key Terms 20
    Q&A 21
Chapter 2 Planning and Scoping a Penetration Testing Assessment 25
    “Do I Know This Already?” Quiz 25
    Explaining the Importance of the Planning and Preparation Phase 29
    Understanding the Legal Concepts of Penetration Testing 41
    Learning How to Scope a Penetration Testing Engagement Properly 44
    Learning the Key Aspects of Compliance-Based Assessments 50
    Review All Key Topics 58
    Define Key Terms 59
    Q&A 59
Chapter 3 Information Gathering and Vulnerability Identification 63
    “Do I Know This Already?” Quiz 63
    Understanding Information Gathering and Reconnaissance 67
    Understanding the Art of Performing Vulnerability Scans 103
    Understanding How to Analyze Vulnerability Scan Results 112
    Review All Key Topics 116
    Define Key Terms 117
    Q&A 117
Chapter 4 Social Engineering Attacks 121
    “Do I Know This Already?” Quiz 121
    Understanding Social Engineering Attacks 125
    Phishing 126
    Pharming 126
    Malvertising 127
    Spear Phishing 128
    SMS Phishing 134
    Voice Phishing 135
    Whaling 135
    Elicitation, Interrogation, and Impersonation (Pretexting) 135
    Social Engineering Motivation Techniques 137
    Shoulder Surfing 137
    USB Key Drop and Social Engineering 138
    Review All Key Topics 138
    Define Key Terms 139
    Q&A 139
Chapter 5 Exploiting Wired and Wireless Networks 143
    “Do I Know This Already?” Quiz 143
    Exploiting Network-Based Vulnerabilities 148
    Exploiting Wireless and RF-Based Attacks and Vulnerabilities 185
    Review All Key Topics 200
    Define Key Terms 202
    Q&A 202
Chapter 6 Exploiting Application-Based Vulnerabilities 207
    “Do I Know This Already?” Quiz 207
    Overview of Web Applications for Security Professionals 213
    How to Build Your Own Web Application Lab 224
    Understanding Injection-Based Vulnerabilities 227
    Exploiting Authentication-Based Vulnerabilities 242
    Exploiting Authorization-Based Vulnerabilities 250
    Understanding Cross-Site Scripting (XSS) Vulnerabilities 252
    Understanding Cross-Site Request Forgery Attacks 260
    Understanding Clickjacking 261
    Exploiting Security Misconfigurations 262
    Exploiting File Inclusion Vulnerabilities 264
    Exploiting Insecure Code Practices 265
    Review All Key Topics 271
    Define Key Terms 272
    Q&A 273
Chapter 7 Exploiting Local Host and Physical Security Vulnerabilities 277
    “Do I Know This Already?” Quiz 277
    Exploiting Local Host Vulnerabilities 281
    Understanding Physical Security Attacks 326
    Review All Key Topics 328
    Define Key Terms 329
    Q&A 329
Chapter 8 Performing Post-Exploitation Techniques 333
    “Do I Know This Already?” Quiz 333
    Maintaining Persistence After Compromising a System 337
    Understanding How to Perform Lateral Movement 347
    Understanding How to Cover Your Tracks and Clean Up Systems After a Penetration Testing Engagement 356
    Review All Key Topics 357
    Define Key Terms 358
    Q&A 358
Chapter 9 Penetration Testing Tools 361
    “Do I Know This Already?” Quiz 361
    Understanding the Different Use Cases of Penetration Testing Tools and How to Analyze Their Output 365
    Leveraging Bash, Python, Ruby, and PowerShell in Penetration Testing Engagements 460
    Review All Key Topics 462
    Define Key Terms 465
    Q&A 465
Chapter 10 Understanding How to Finalize a Penetration Test 471
    “Do I Know This Already?” Quiz 471
    Explaining Post-Engagement Activities 474
    Surveying Report Writing Best Practices 475
    Understanding Report Handling and Communications Best Practices 499
    Review All Key Topics 501
    Define Key Terms 502
    Q&A 502
Chapter 11 Final Preparation 505
    Tools for Final Preparation 505
    Suggested Plan for Final Review/Study 509
    Summary 509
Appendix A Answers to the “Do I Know This Already?” Quizzes and

Online Elements:
Glossary of Key Terms
Appendix B Study Planner

TOC, 9780789760357

Published by Pearson IT Certification (June 21st 2021) - Copyright © 2019

ISBN-13: 9780137459841

Subject: IT Certification

Category: CompTIA

Your questions answered

Pearson+ is your one-stop shop, with eTextbooks and study videos designed to help students get better grades in college.

A Pearson eTextbook is an easy‑to‑use digital version of the book. You'll get upgraded study tools, including enhanced search, highlights and notes, flashcards and audio. Plus learn on the go with the Pearson+ app.

Your eTextbook subscription gives you access for 4 months. You can make a one‑time payment for the initial 4‑month term or pay monthly. If you opt for monthly payments, we will charge your payment method each month until your 4‑month term ends. You can turn on auto‑renew in My account at any time to continue your subscription before your 4‑month term ends.

When you purchase an eTextbook subscription, it will last 4 months. You can renew your subscription by selecting Extend subscription on the Manage subscription page in My account before your initial term ends.

If you extend your subscription, we'll automatically charge you every month. If you made a one‑time payment for your initial 4‑month term, you'll now pay monthly. To make sure your learning is uninterrupted, please check your card details.

To avoid the next payment charge, select Cancel subscription on the Manage subscription page in My account before the renewal date. You can subscribe again in the future by purchasing another eTextbook subscription.

Channels is a video platform with thousands of explanations, solutions and practice problems to help you do homework and prep for exams. Videos are personalized to your course, and tutors walk you through solutions. Plus, interactive AI‑powered summaries and a social community help you better understand lessons from class.

Channels is an additional tool to help you with your studies. This means you can use Channels even if your course uses a non‑Pearson textbook.

When you choose a Channels subscription, you're signing up for a 1‑month, 3‑month or 12‑month term and you make an upfront payment for your subscription. By default, these subscriptions auto‑renew at the frequency you select during checkout.

When you purchase a Channels subscription it will last 1 month, 3 months or 12 months, depending on the plan you chose. Your subscription will automatically renew at the end of your term unless you cancel it.

We use your credit card to renew your subscription automatically. To make sure your learning is uninterrupted, please check your card details.