CompTIA PenTest+

CompTIA original textbook

CompTIA PenTest+ is included in the "Executive Yuan National Information Security Conference" approved list of cybersecurity certifications.
It complies with ISO 17024 standards and has been approved by the U.S. Department of Defense to meet the requirements of Directive 8140 / 8570.01-M. Regulatory bodies and governments rely on ANSI certification because it provides confidence and trust in the output of certified programs. Since January 1, 2011, more than 2.3 million CompTIA ISO / ANSI certified exams have been conducted.

This course is primarily aimed at individuals who want to further understand how to conduct penetration testing to assess vulnerabilities and manage them, ensuring network resilience in defending against attacks. It focuses on proactive cybersecurity frameworks within the realm of network information security.

Upon completing this course, you will be able to plan, execute, analyze, and report on penetration tests effectively.

• Planning and execution of scoped penetration testing
• conduct passive reconnaissance
• Perform non-technical testing to gather information
• aggregate active reconnaissance
• Analyze vulnerabilities
• Penetrating the Internet
• Exploiting host-based vulnerabilities
• Test applications and complete mining post-development tasks
• Analyze and report penetration testing results

The CompTIA PenTest+ official course is designed to help cybersecurity professionals develop and enhance their penetration testing skills, allowing them to identify system vulnerabilities and effectively fix them. The course focuses on the knowledge, skills, and abilities needed to plan, scope, and manage vulnerability assessments, rather than just exploiting system flaws. It’s the ideal prep for those looking to take the CompTIA PenTest+ certification exam.

To ensure your success in this course, you should have:
• Advanced knowledge of cybersecurity concepts, including but not limited to identity and access management (IAM), encryption concepts and implementation, computer networking concepts and implementation, and common security technologies.
• Practical experience in securing various computing environments (including small and medium-sized businesses) as well as enterprise environments.
• You can acquire the necessary skills and knowledge by completing CompTIA Security+ and Network+ certification courses.

• Expert Instructors with Extensive Cybersecurity Experience: Exclusive Training

1. 1. taught by instructors with 15 years of experience, exclusively taught by network security experts.
   2. Led by cybersecurity experts with 20+ years of enterprise and management experience, ready to solve your toughest challenges

• Maximum of 20 Students per Class:
  With a class size of no more than 20 students, the instructor can closely monitor each student's progress and learning needs, ensuring personalized interaction to maximize knowledge gain and learning outcomes for every participant.

• CompTIA Official Materials (First Authorized in Taiwan):
  The materials are provided by CompTIA with full authorization, ensuring professional quality and practical exercises that strictly adhere to the official standards and requirements, not self-created by individuals.

• Includes CompTIA Lab hands-on exercises:
  The course includes official Lab exercises, providing you with deeper practical training to strengthen your certification and hands-on skills.

• Free Retake Service:
  Enjoy one free retake within one year after the course, regardless of the version. However, upgraded materials will incur an additional fee.

• Establish Line Network+ Class Group Discussions:
  Once the class is confirmed, a Line Network+ group will be created for online discussions and experience sharing at any time.

課程大綱：
1 – 規劃和範圍滲透的測試
簡介滲透測試的概念
參與和規劃滲透測試
參與和協商滲透測試的範圍
參與和準備滲透測試

2 – 進行被動偵察
收集背景資訊
為下一步準備背景調查結果

3 – 執行非技術測試
執行社交工程測試
對設施進行物理安全測試

4 – 進行主動偵察
掃描網路
列舉目標
掃描漏洞
分析基本腳本

5 – 分析漏洞
分析漏洞掃描結果
利用資訊為開發做好準備

6 – 滲透網路
利用基於網路的漏洞
利用基於無線和射頻的漏洞
利用基於專用系統

7 – 利用基於主機的漏洞
利用基於 Windows 的漏洞
利用基於 *nix 的漏洞

8 – 測試應用程式
利用 Web 應用程式漏洞
測試原始碼和編譯的應用程式

9 – 完成開發後任務
使用水平擴散技術
使用持久性技術
使用反取證技術

10 – 分析和報告滲透測試的結果
分析滲透測試的數據
制定緩解策略的建議
撰寫和報告的處理
發展報告後的交付活動

• Maintaining Certification Validity
  1. 認證資格取得後三年內有效，然後每三年維持認證有效的方式包含持續接受實體課程、線上課程，或獲得50個以上的CEUs (Continue Education Units)等。詳情請參考CompTIA官網:
     https://www.comptia.org/continuing-education/learn/how-to-renew
• 其他相關資訊: 詳見 CompTIA官網: https://www.comptia.org/certifications/security