UUS Practice Tests⌕ Search
IT Certifications

CompTIA PenTest+ Certification Exam Practice Test

Penetration testing combines vulnerability analysis with controlled attempts to validate security weaknesses. This practice page’s questions touch on web application flaws such as SQL injection and cross-site scripting, exposure of sensitive files, network traffic analysis, authentication risks, and the handling of evidence collected during an authorized assessment.

Exam overview

Exam providerCompTIA
Exam codeNot listed
CategoryIT Certifications

About the CompTIA PenTest+ Certification Exam

Effective testing requires distinguishing a scanner’s possible finding from a weakness supported by evidence, then choosing a validation method that limits impact. Questions may ask how to verify software configuration, assess an exposed backup without collecting unnecessary data, or compare a public website with an earlier authorized review. Other scenarios focus on interpreting packet fields to isolate endpoint conversations, recognizing account-takeover risks in password-reset flows, and evaluating whether captured authentication tokens can be replayed. Reporting is also part of the work: technical findings need context about affected services and remediation priority. After testing, sensitive evidence should be accounted for, protected, and securely removed according to the engagement’s handling requirements.

Sample Practice Questions

Review a selection from this exam's published US Practice Tests practice bank.

Question 1

Which approach is most appropriate when a scanner reports a possible SQL injection vulnerability?

  1. ATreat the finding as confirmed and report it without review
  2. BUse a safe, minimal validation method within the authorized scope
  3. CRun destructive database commands to prove impact
  4. DPublish the target URL so others can verify the result
Show answerCorrect answer: B

Scanner output can include false positives. A tester should validate a suspected issue with a minimal, non-destructive technique that stays within the engagement's authorization and constraints.

Question 2

A tester needs to assess whether a host is exposed to a vulnerability that depends on a particular software configuration. Which evidence is generally strongest for establishing that configuration?

  1. AA generic banner that may be supplied or modified by a proxy
  2. BA direct, authorized review of the relevant configuration or a reliable runtime behavior check
  3. CA search-engine result mentioning the software product
  4. DThe fact that another host in the same subnet has the vulnerability
Show answerCorrect answer: B

Direct configuration evidence or a reliable behavior-based check provides stronger support than indirect clues such as a potentially misleading banner, public search result, or findings on a different host.

Question 3

A tester finds a database backup file in a location accessible to unauthenticated visitors. What is the most appropriate way to assess the exposure while minimizing unnecessary data collection?

  1. ADownload the entire backup and retain it indefinitely
  2. BConfirm access using a minimal, non-sensitive indicator and avoid collecting more data than needed
  3. CShare the URL publicly so others can verify the exposure
  4. DModify the backup file to prove that write access is also possible
Show answerCorrect answer: B

The tester should establish the exposure with minimal evidence and avoid collecting or retaining sensitive data unnecessarily. Public disclosure or modification of the file would create avoidable risks and exceed the validation needed.

Question 4

A tester is preparing a report for a technical finding that affects a component used by several business services. Which addition most helps the client prioritize remediation?

  1. AA concise explanation of the affected component’s dependencies and plausible business consequences
  2. BA list of unrelated vulnerabilities found on other organizations’ systems
  3. CThe tester’s personal ranking of the system administrators
  4. DA copy of every raw packet captured during the engagement, without context
Show answerCorrect answer: A

Explaining dependencies and plausible business consequences connects technical evidence to operational impact and helps stakeholders prioritize remediation. Unrelated material or unfiltered raw data does not provide that context.

Question 5

A tester is asked to assess whether an organization’s public website has changed since a previous authorized review. Which approach best supports a reliable comparison?

  1. ACompare dated, normalized snapshots of the relevant pages and record the collection method
  2. BRely on a search engine’s cached copy without checking its date
  3. CCompare screenshots taken at different browser zoom levels
  4. DTreat any change in page size as evidence of a security weakness
Show answerCorrect answer: A

Dated snapshots collected consistently make changes easier to identify and verify. Normalization helps avoid mistaking incidental formatting or dynamic content for meaningful changes; a change alone does not establish a vulnerability.

Question 6

After completing an authorized test, a tester has collected sensitive evidence files. Which handling practice best supports secure cleanup and accountability?

  1. AStore evidence in an access-controlled location, track its handling, and securely dispose of it according to the agreed retention process
  2. BKeep copies indefinitely on a personal device for future reference
  3. CUpload the files to a public file-sharing service for convenient access
  4. DRename the files to remove client identifiers and leave them in the original collection directory
Show answerCorrect answer: A

Sensitive evidence should be protected with restricted access and handled according to documented retention and disposal requirements. Indefinite personal storage or public sharing creates exposure, while renaming alone does not remove the underlying data or secure it.

Question 7

A tester is reviewing a network capture that contains packets from many unrelated conversations. Which network field is most useful for isolating traffic between two specific endpoints?

  1. AThe source and destination IP addresses, combined with transport-layer ports as needed.
  2. BThe Ethernet frame padding length alone.
  3. CThe time zone configured on the capture workstation.
  4. DThe vendor name associated with the capture software.
Show answerCorrect answer: A

Source and destination addresses identify the communicating endpoints, while transport-layer ports can further distinguish services or conversations. These fields are common filters for narrowing packet captures.

How to use this practice test

The free practice bank contains 50 questions; each session presents up to 20 randomly selected questions. Answer the scenarios before reviewing the results shown at the end. Use missed answers to identify topics for focused review, such as safe vulnerability validation, packet analysis, authentication controls, or evidence handling.

Preparation tips

  • For suspected SQL injection or cross-site scripting, compare safe validation approaches and avoid payloads that alter accounts or other client data.
  • Practice identifying evidence that confirms a software configuration, and distinguish configuration proof from a scanner’s unverified alert.
  • Review packet-capture fields used to filter conversations between two endpoints, including source and destination addresses and ports.
  • For exposed backups and collected evidence, plan how to minimize data access, preserve accountability, and securely clean up files.
  • Analyze password-reset and token-reuse scenarios by tracing how an attacker could take over an account and which control interrupts that path.
Official sourceOfficial exam page ↗