CompTIA PenTest+ PT0-002 Cert Guide, 2nd Edition

Cover Page
About This eBook
Title Page
Copyright Page
Pearson’s Commitment to Diversity, Equity, and Inclusion
Credits
Contents at a Glance
Contents
About the Author
Dedication
Acknowledgments
About the Technical Reviewer
We Want to Hear from You!
Reader Services
Introduction
    The Goals of the CompTIA PenTest+ Certification
    The Exam Objectives (Domains)
    Steps to Earning the PenTest+ Certification
    Facts About the PenTest+ Exam
    About the CompTIA PenTest+ PT0-002 Cert Guide
    Companion Website
    Pearson Test Prep Practice Test Software
Chapter 1 Introduction to Ethical Hacking and Penetration Testing
    “Do I Know This Already?” Quiz
    Foundation Topics
    Understanding Ethical Hacking and Penetration Testing
    Exploring Penetration Testing Methodologies
    Building Your Own Lab
    Exam Preparation Tasks
    Review All Key Topics
    Define Key Terms
    Q&A
Chapter 2 Planning and Scoping a Penetration Testing Assessment
    “Do I Know This Already?” Quiz
    Foundation Topics
    Comparing and Contrasting Governance, Risk, and Compliance Concepts
    Explaining the Importance of Scoping and Organizational or Customer Requirements
    Demonstrating an Ethical Hacking Mindset by Maintaining Professionalism and Integrity
    Exam Preparation Tasks
    Review All Key Topics
    Define Key Terms
    Q&A
Chapter 3 Information Gathering and Vulnerability Scanning
    “Do I Know This Already?” Quiz
    Foundation Topics
    Performing Passive Reconnaissance
    Performing Active Reconnaissance
    Understanding the Art of Performing Vulnerability Scans
    Understanding How to Analyze Vulnerability Scan Results
    Exam Preparation Tasks
    Review All Key Topics
    Define Key Terms
    Q&A
Chapter 4 Social Engineering Attacks
    “Do I Know This Already?” Quiz
    Foundation Topics
    Pretexting for an Approach and Impersonation
    Social Engineering Attacks
    Physical Attacks
    Social Engineering Tools
    Methods of Influence
    Exam Preparation Tasks
    Review All Key Topics
    Define Key Terms
    Q&A
Chapter 5 Exploiting Wired and Wireless Networks
    “Do I Know This Already?” Quiz
    Foundation Topics
    Exploiting Network-Based Vulnerabilities
    Exploiting Wireless Vulnerabilities
    Exam Preparation Tasks
    Review All Key Topics
    Define Key Terms
    Q&A
Chapter 6 Exploiting Application-Based Vulnerabilities
    “Do I Know This Already?” Quiz
    Foundation Topics
    Overview of Web Application-Based Attacks for Security Professionals and the OWASP Top 10
    How to Build Your Own Web Application Lab
    Understanding Business Logic Flaws
    Understanding Injection-Based Vulnerabilities
    Exploiting Authentication-Based Vulnerabilities
    Exploiting Authorization-Based Vulnerabilities
    Understanding Cross-Site Scripting (XSS) Vulnerabilities
    Understanding Cross-Site Request Forgery (CSRF/XSRF) and Server-Side Request Forgery Attacks
    Understanding Clickjacking
    Exploiting Security Misconfigurations
    Exploiting File Inclusion Vulnerabilities
    Exploiting Insecure Code Practices
    Exam Preparation Tasks
    Review All Key Topics
    Define Key Terms
    Q&A
Chapter 7 Cloud, Mobile, and IoT Security
    “Do I Know This Already?” Quiz
    Foundation Topics
    Researching Attack Vectors and Performing Attacks on Cloud Technologies
    Explaining Common Attacks and Vulnerabilities Against Specialized Systems
    Exam Preparation Tasks
    Review All Key Topics
    Define Key Terms
    Q&A
Chapter 8 Performing Post-Exploitation Techniques
    “Do I Know This Already?” Quiz
    Foundation Topics
    Creating a Foothold and Maintaining Persistence After Compromising a System
    Understanding How to Perform Lateral Movement, Detection Avoidance, and Enumeration
    Exam Preparation Tasks
    Review All Key Topics
    Define Key Terms
    Q&A
Chapter 9 Reporting and Communication
    “Do I Know This Already?” Quiz
    Foundation Topics
    Comparing and Contrasting Important Components of Written Reports
    Analyzing the Findings and Recommending the Appropriate Remediation Within a Report
    Explaining the Importance of Communication During the Penetration Testing Process
    Explaining Post-Report Delivery Activities
    Exam Preparation Tasks
    Review All Key Topics
    Define Key Terms
    Q&A
Chapter 10 Tools and Code Analysis
    “Do I Know This Already?” Quiz
    Foundation Topics
    Understanding the Basic Concepts of Scripting and Software Development
    Understanding the Different Use Cases of Penetration Testing Tools and Analyzing Exploit Code
    Exam Preparation Tasks
    Review All Key Topics
    Define Key Terms
    Q&A
Chapter 11 Final Preparation
    Tools for Final Preparation
    Suggested Plan for Final Review/Study
    Summary
Glossary of Key Terms
Appendix A Answers to the “Do I Know This Already?” Quizzes and Q&A Sections
Appendix B CompTIA® PenTest+ PT0-002 Cert Guide Exam Updates
Index
Appendix C Study Planner
Where are the companion content files? - Register
Inside Front Cover
Inside Back Cover
Code Snippets