Free CompTIA PenTest+ (PT0-003) Practice Questions

Sample PT0-003 Practice Questions

Browse all 2 free CompTIA PenTest+ practice questions below.

1. A penetration tester is preparing to conduct a black box assessment for a financial services company. The client has requested a comprehensive test of their external-facing web applications and network infrastructure. Which of the following documents should the penetration tester ensure are signed and in place BEFORE beginning any testing activities? (Select TWO)

   • Penetration Test Report
   • Common Vulnerability Scoring System (CVSS) Framework
   • Incident Response Plan
   • Rules of Engagement (RoE)
   • Master Service Agreement (MSA)

2. A penetration tester is preparing to conduct an external assessment for a healthcare organization. During the scoping meeting, the client mentions they must maintain HIPAA compliance. Which of the following should the penetration tester include in the Rules of Engagement?

   • A waiver stating that all HIPAA regulations are suspended during the test
   • Acknowledgment that testing will be conducted in compliance with HIPAA requirements and restrictions on handling PHI (Protected Health Information)
   • Ignore HIPAA since penetration testing is exempt from compliance requirements
   • Permission to share any discovered PHI with third parties for validation