Totaalpakket CompTIA PenTest+ (Exam: PT0-002) incl. examenvoucher
Ethical Hacker
52 uur
Engels (US)

Totaalpakket CompTIA PenTest+ (Exam: PT0-002) incl. examenvoucher

Incompany training aanvragen

Snel navigeren naar:

  • Informatie
  • Inhoud
  • Kenmerken
  • Meer informatie
  • Reviews
  • FAQ

Productinformatie

Wil jij graag de CompTIA PenTest+ (Exam: PT0-002) certificering behalen? Dan is dit totaalpakket ideaal voor jou!

In dit totaalpakket zit het volgende inbegrepen:

  • E-learning
  • LiveLab
  • Oefenexamen
  • Examenvoucher

E-learning

Penetratietests zijn gecoördineerde en gesimuleerde cyberaanvallen die worden gebruikt om de beveiliging van een computersysteem of computernetwerk te evalueren. Deze training helpt je om je voor te bereiden op het CompTIA PenTest+ (PT0-002) certificeringsexamen. In deze E-learning komen in ieder geval de volgende onderwerpen aan bod:

  • De basisprincipes- van penetratietesten, inclusief een vergelijking van governance-, risico- en compliance-concepten.
  • Het ontwikkelen van ethische hackmentaliteit.
  • Het verzamelen van informatie met behulp van verschillende passieve verkenningstechnieken, zoals DNS-lookups, cryptografische fouten en scraping op sociale media.
  • Het gberuiken van actieve verkenningstechnieken, zoals telling en websiteverkenning, die vaak worden gebruikt om informatie te verzamelen over hosts, services en websites.
  • De kwetsbaarheidsscanner, het configureren ervan, de verschillende scanmethoden en scanthema's.
  • Netwerkaanvallen en hoe je deze onderzoekt en tegengaat.
  • Verschillende aanvalsmethoden zoals afluisteren, gegevensmodificatie, gegevenscorruptie, relay-aanvallen, spoofing, jamming, on-path en capture-handshakes.
  • Social engineering. Wat is het en hoe kun je het herkennen?
  • Post-exploitatie technieken en tools
  • Het opstellen van een schriftelijk eindrapport door een penetratietester os testteam waarin alle bevindingen en aanbevelingen voor een klant in gedocumenteerd worden.

LiveLab

In dit totaalpakket zit een LiveLab. In een LiveLab voer je opdrachten uit, gericht op de echte hardware en/of software. Een LiveLab is de ideale mogelijkheid om praktische ervaring op te doen. Omdat deze LiveLabs volledig door ons in de cloud gehost worden, heb je zelf alleen een browser nodig om ze uit te kunnen voeren. De labomgevingen bestaan uit complete netwerken met bijvoorbeeld clients, servers, routers etc. Dit is de ultieme manier om uitgebreide praktijkervaring op te doen.

Proefexamen

Dit totaalpakket bevat ook een proefexamen. Met dit proefexamen test je of je klaar bent om het CompTIA PenTest+ (Exam: PT0-002) examen te halen. De proefexamens zijn zowel qua vorm als qua inhoud zo vormgegeven dat ze dicht bij de echte examens liggen.

Examenvoucher

Na het afronden van deze training, het LiveLab en het proefexamen, ben jij optimaal voorbereid om het officiële examen af te leggen. Dit totaalpakket bevat dan ook een examenvoucher waarmee jij het officiële CompTIA PenTest+ (Exam: PT0-002) examen kunt aanvragen en afleggen. De examenvoucher kun je aanvragen via onze supportafdeling. Je dient deze aan te vragen gedurende de looptijd van de training.

Inhoud van de training

Totaalpakket CompTIA PenTest+ (Exam: PT0-002) incl. examenvoucher

52 uur

CompTIA PenTest+ (PT0-002): Scoping & Engagement

  • Penetration testing is a coordinated and simulated cyberattack

  • used to evaluate the security of a computer system or computer
  • network. The initial and critical planning phase of penetration
  • testing is key to a successful engagement process. In this course,
  • you'll explore the fundamentals of penetration testing, including a
  • comparison of governance, risk, and compliance concepts. You'll
  • examine legal concepts such as service level agreements, statements
  • of work, non-disclosure agreements, and master service agreements.
  • You'll learn the importance of scoping and organizational and
  • customer requirements, including common standards and
  • methodologies, rules of engagement, environmental considerations,
  • target list definition, and scope of the engagement validation.
  • This course is one of a collection that helps prepare learners for
  • the CompTIA PenTest+ (PT0-002) certification exam.

CompTIA PenTest+ (PT0-002): Professionalism & Integrity

  • Penetration testers must be ethical in order to avoid any

  • illegal activities and to best serve clients. In this course,
  • you'll learn how to develop and demonstrate an ethical hacking
  • mindset by maintaining integrity and professionalism during
  • penetration testing exercises. You'll explore the importance of
  • performing background checks on penetration testing team members
  • and adhering to the scope of engagement. You'll then examine how to
  • identify, handle, and report on security breaches and potential
  • findings of a criminal nature. You'll learn how to limit the use of
  • tools for a particular engagement and invasiveness based on scope.
  • Lastly, you'll learn the importance of maintaining data and
  • information confidentiality of data and information and explore
  • risks to penetration testing team members. This course is one of a
  • collection that helps prepare learners for the CompTIA PenTest+
  • (PT0-002) certification exam.

CompTIA PenTest+ (PT0-002): Passive Reconnaissance

  • One of the main responsibilities of a penetration tester is to

  • gather information by way of reconnaissance. Simply put,
  • reconnaissance is the process of collecting as much information as
  • possible about a target. In this course, you'll learn how to gather
  • information using various passive reconnaissance techniques such as
  • DNS lookups, cryptographic flaws, and social media scraping. You'll
  • learn how to differentiate between cloud and self-hosted
  • reconnaissance and examine valuable data found in password dumps,
  • metadata, and public source-code repositories. You'll also explore
  • how to use open source intelligence techniques, tools, and sources
  • to exploit weaknesses and gather intelligence. This course will
  • help prepare learners for the CompTIA PenTest+ PT0-002
  • certification exam.

CompTIA PenTest+ (PT0-002): Active Reconnaissance

  • Active reconnaissance requires a penetration tester to engage

  • and interact with the targeted system to gather information and
  • identify vulnerabilities. To do this, penetration testers can use
  • several different methods including automated scanning and manual
  • testing techniques. In this course, you'll learn how to use active
  • reconnaissance techniques such as enumeration and web site
  • reconnaissance, which are commonly used to gather intelligence
  • about hosts, services, and web sites. You'll also learn about
  • packet crafting, tokens, wardriving, network traffic, active
  • fingerprinting, and defense detection and avoidance techniques.
  • This course is one of a collection that helps prepare learners for
  • the CompTIA PenTest+ (PT0-002) certification exam.

CompTIA PenTest+ (PT0-002): Vulnerability Scanning

  • Vulnerability scanning is a process used to assess systems for

  • known weaknesses. In this course, you'll learn how to configure
  • vulnerability scanner settings and scan targets for
  • vulnerabilities. You'll explore the different types of scanning
  • methods, as well as vulnerability testing tools and common scanning
  • themes. Next, you'll learn how to perform a scan analysis. You'll
  • also examine the Nmap utility, which is designed to discover hosts
  • and services on a computer network. You'll move on to explore Nmap
  • Scripting Engine scripts and the numerous switches included in the
  • Nmap utility that can helpful in penetration testing. Lastly,
  • you'll learn about vulnerability testing tools that can help
  • facilitate automation. This course is one of a collection that
  • helps prepare learners for the CompTIA PenTest+ (PT0-002)
  • certification exam.

CompTIA PenTest+ (PT0-002): Network Attacks & Exploits

  • Network attacks are commonly performed to gain unauthorized

  • access to an organization's network, with a goal of performing
  • malicious activity or stealing data. In this course, you'll learn
  • how to research attack vectors and perform network attacks. You'll
  • learn about password attacks such as password spraying, hash
  • cracking, brute force, and dictionary. You'll explore how to
  • perform common network attacks such as ARP poisoning, on-path,
  • kerberoasting, virtual local area network hopping, as well as
  • Link-Local Multicast Name Resolution and NetBIOS Name Service
  • poisoning. Finally, you'll explore common network attack tools such
  • as Metasploit, Netcat, and Nmap. This course is one of a collection
  • that helps prepare learners for the CompTIA PenTest+ (PT0-002)
  • certification exam.

CompTIA PenTest+ (PT0-002): Wireless Attacks

  • The goal of a wireless network attack is generally to capture

  • information sent across the network. In this course, you'll learn
  • how to research attack vectors and perform wireless attacks. You'll
  • explore common wireless network attack methods including
  • eavesdropping, data modification, data corruption, relay attacks,
  • spoofing, jamming, on-path, and capture handshakes. You'll then
  • learn about common network attacks such as evil twin, bluejacking,
  • bluesnarfing, radio-frequency identification cloning, amplification
  • attacks, and Wi-Fi protected setup PIN attacks. Lastly, you'll
  • discover how to use aircrack-ng suite and amplified antenna
  • wireless network attack tools. This course is one of a collection
  • that helps prepare learners for the CompTIA PenTest+ (PT0-002)
  • certification exam.

CompTIA PenTest+ (PT0-002): Application-based Attacks

  • Application-based attacks are designed to deliberately cause a

  • fault in a computer's operating system or applications. In this
  • course, you'll learn how to research attack vectors and perform
  • application-based attacks. You'll explore the benefits of the OWASP
  • Top 10 standard awareness document, which is used to present the
  • most critical security risks to web applications. You'll examine
  • application-based attacks such as server-side request forgery,
  • business logic flaws, and injection attacks. You'll move on to
  • learn about application vulnerabilities such as race conditions,
  • lack of code signing, and session attacks, as well as the
  • characteristics of API attacks such as Restful, Soap, and
  • Extensible Markup Language-Remote Procedure Call. Lastly, you'll
  • learn about application-based attack tools and resources. This
  • course is one of a collection that helps prepare learners for the
  • CompTIA PenTest+ (PT0-002) certification exam.

CompTIA PenTest+ (PT0-002): Attacks on Cloud Technologies

  • Penetration testers need to account for all types of systems

  • available in an environment. In addition to servers and network
  • appliances, this can also include cloud-based systems. In this
  • course, you'll learn how to research attack vectors and perform
  • attacks on cloud technologies. You'll explore common cloud-based
  • attacks, such as credential harvesting, privilege escalation, and
  • account takeovers. You'll learn how to identify misconfigured cloud
  • assets, including identity and access management and
  • containerization technologies. You'll move on to explore how cloud
  • malware injection, denial of service, and side-channel attacks can
  • exploit a system. Lastly, you'll learn about common cloud tools
  • such as the software development kit. This course is one of a
  • collection that helps prepare learners for the CompTIA PenTest+
  • (PT0-002) certification exam.

CompTIA PenTest+ (PT0-002): Attacks on Specialized Systems

  • Specialized systems by nature can be very challenging for

  • penetration testers. They can use proprietary operating systems and
  • file systems, and may require advanced reverse engineering and
  • sandbox analysis. However, specialized systems are also very
  • susceptible when it comes to weaknesses and vulnerabilities. In
  • this course, you'll learn how to identify common attacks and
  • vulnerabilities against specialized systems, including mobile
  • systems and Internet of Things devices. You'll also explore common
  • vulnerabilities, including data storage system vulnerabilities,
  • management interface vulnerabilities, vulnerabilities related to
  • virtual environments, and vulnerabilities related to containerized
  • workloads. This course is one of a collection that helps prepare
  • learners for the CompTIA PenTest+ (PT0-002) certification exam.

CompTIA PenTest+ (PT0-002): Social Engineering Attacks

  • Social engineering involves the psychological manipulation of

  • people and it's used to trick them into divulging information or
  • performing certain actions. In this course, you'll learn how social
  • engineering attacks are performed and how they can be used by
  • attackers. You'll explore the pretext for a social engineering
  • approach, as well as various social engineering attacks such as
  • e-mail phishing, vishing, short message service, phishing,
  • universal serial bus drop key, and watering hole. You'll then learn
  • about tailgating, dumpster diving, shoulder surfing, and badge
  • cloning physical attack methods. Lastly, you'll examine social
  • engineering impersonation techniques, methods of influence, and
  • tools. This course is one of a collection that helps prepare
  • learners for the CompTIA PenTest+ (PT0-002) certification exam.

CompTIA PenTest+ (PT0-002): Post-Exploitation Techniques

  • Cybercriminals use post-exploitation techniques to maintain a

  • level of access while they attempt to perform other actions during
  • an open session. In this course, you'll learn about
  • post-exploitation techniques and tools. You'll explore common
  • post-exploitation tools such as Empire, Mimikatz, and BloodHound.
  • Next, you'll examine post-exploitation techniques such as lateral
  • movement, privilege escalation, and upgrading a restrictive shell.
  • You'll learn techniques used to maintain foothold and persistence
  • using trojans, backdoors, and daemons. Finally, you'll learn
  • detection avoidance techniques, as well as enumeration techniques
  • used to extract users, groups, forests, sensitive data, and
  • unencrypted files. This course is one of a collection that helps
  • prepare learners for the CompTIA PenTest+ (PT0-002) certification
  • exam.

CompTIA PenTest+ (PT0-002): Written Reports

  • A final written report is prepared by a penetration tester or

  • testing team to document all findings and recommendations for the
  • client once the engagement has completed. In this course, you'll
  • learn the critical components of a written report, as well as the
  • importance of communication during the penetration testing process.
  • You'll explore how to analyze and report on findings, and how to
  • securely distribute of the final product. Next, you'll examine
  • common content to include in a written report such as an executive
  • summary, scope details, methodology, findings, and conclusion.
  • Lastly, you'll learn the steps required to properly analyze the
  • findings and recommend the appropriate remediation within a report.
  • This course is one of a collection that helps prepare learners for
  • the CompTIA PenTest+ (PT0-002) certification exam.

CompTIA PenTest+ (PT0-002): Communication & Post-Report Activities

  • During penetration testing, tester activities can leave behind
  • remnants that may alter a system. Any action performed during
  • testing should be clearly documented. Upon completion of testing,
  • penetration testers should perform a series of post-report delivery
  • activities that include removing shells, removing tester created
  • credentials, and removing any penetration testing tools. In this
  • course, you'll explore post-report delivery activities such as
  • post-engagement cleanup, client acceptance, lessons learned,
  • attestation of findings, as well as data destruction processes and
  • best practices. You'll also learn the importance of communication
  • during the penetration testing process. This course is one of a
  • collection that helps prepare learners for the CompTIA PenTest+
  • (PT0-002) certification exam.

CompTIA PenTest+ (PT0-002): Analyzing Tool & Script Output

  • Scripting languages can be used by penetration testers to help

  • automate the execution of common tasks and increase the depth and
  • scope of testing coverage. In this course, you'll learn the basic
  • concepts of scripting and software development. Explore logic
  • constructs concepts such as loops and conditionals, as well as the
  • following operators; Boolean, string, and arithmetic. Discover
  • other basic concepts of scripting including data structures,
  • libraries, classes, procedures, and functions. You then explore how
  • to analyze a script or code sample for use in a penetration test.
  • Discover shells, programming languages, and exploit codes, and
  • learn how to identify opportunities for automation. This course is
  • one of a collection that helps prepare learners for the CompTIA
  • PenTest+ (PT0-002) certification exam.

CompTIA PenTest+

CompTIA PT0-002

CompTIA - PT0-002: PenTest+

CompTIA - PT0-002: PenTest+

Kenmerken

Docent inbegrepen
Bereidt voor op officieel examen
Engels (US)
52 uur
Ethical Hacker
180 dagen online toegang
HBO

Meer informatie

Doelgroep Securityspecialist
Voorkennis

Je beschikt over CompTIA Network+, CompTIA Security+ of gelijkwaardige kennis.

Het is aan te raden om minimaal 3-4 jaar hands-on ervaring te hebben op het gebied van information security of gerelateerde ervaring.

Resultaat

Na succesvolle afronding ben je bekend met de concepten en methodologieën met betrekking tot penetratietesten. Tevens ben je klaar voor het CompTIA PenTest+ (PT0-002) certificeringsexamen.

Positieve reacties van cursisten

Training: Leidinggeven aan de AI transformatie

Nuttige training. Het bestelproces verliep vlot, ik kon direct beginnen.

- Mike van Manen

Onbeperkt Leren Abonnement

Onbeperkt Leren aangeschaft omdat je veel waar voor je geld krijgt. Ik gebruik het nog maar kort, maar eerste indruk is goed.

- Floor van Dijk

Training: Leidinggeven aan de AI transformatie

Al jaren is icttrainingen.nl onze trouwe partner op het gebied van kennisontwikkeling voor onze IT-ers. Wij zijn blij dat wij door het platform van icttrainingen.nl maatwerk en een groot aanbod aan opleidingen kunnen bieden aan ons personeel.

- Loranne, Teamlead bij Inwork

Hoe gaat het te werk?

1

Training bestellen

Nadat je de training hebt besteld krijg je bevestiging per e-mail.

2

Toegang leerplatform

In de e-mail staat een link waarmee je toegang krijgt tot ons leerplatform.

3

Direct beginnen

Je kunt direct van start. Studeer vanaf nu waar en wanneer jij wilt.

4

Training afronden

Rond de training succesvol af en ontvang van ons een certificaat!

Veelgestelde vragen

Veelgestelde vragen

Op welke manieren kan ik betalen?

Je kunt bij ons betalen met iDEAL, PayPal, Creditcard, Bancontact en op factuur. Betaal je op factuur, dan kun je met de training starten zodra de betaling binnen is.

Hoe lang heb ik toegang tot de training?

Dit verschilt per training, maar meestal 180 dagen. Je kunt dit vinden onder het kopje ‘Kenmerken’.

Waar kan ik terecht als ik vragen heb?

Je kunt onze Learning & Development collega’s tijdens kantoortijden altijd bereiken via support@icttrainingen.nl of telefonisch via 026-8402941.

Background Frame
Background Frame

Onbeperkt leren

Met ons Unlimited concept kun je onbeperkt gebruikmaken van de trainingen op de website voor een vast bedrag per maand.

Bekijk de voordelen

Heb je nog twijfels?

Of gewoon een vraag over de training? Blijf er vooral niet mee zitten. We helpen je graag verder. Daar zijn we voor!

Contactopties