CompTIA’s newest IT certification, CompTIA PenTest+, assesses the knowledge and skills needed to run a comprehensive, responsible and successful penetration testing program. Released on July 31, 2018, it tests individuals in five technical areas:

• Planning and scoping
• Information gathering and vulnerability identification
• Attacks and exploits
• Penetration testing tools
• Reporting and communication

As part of the exam development process, CompTIA enlisted cybersecurity professionals to preview the exam as beta testers.

A Beta Tester Reviews CompTIA PenTest+

Molly Stewart is a Linux cloud engineer from St. Louis, Missouri, and was one of the beta testers for CompTIA PenTest+. She shared her experience with us and the value she finds in the certification.

1. Please tell me a bit about your job and how it’s related to cybersecurity.

I help design secure solutions for customers who plan to migrate their existing architectures or build new capabilities into the cloud. It is important that I am aware of all implications and risks associated with the decisions I make both when I make suggestions and during implementation. I often work very closely with the security auditing teams.

2. How did you hear about CompTIA PenTest+, and why did you decide to take it?

I hold other certifications from CompTIA and was sent an email about it. I wanted to sharpen my skillset and see where [CompTIA PenTest+] stood against my other cybersecurity certifications:

• GIAC Penetration Tester (GPEN)
• GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)
• Certified Information Systems Security Professional (CISSP)
• Systems Security Certified Professional (SCCP)
• CompTIA Security+
• Certified Ethical Hacker (CEH)

4. How did you prepare for the CompTIA PenTest+ exam?

I studied the exam objectives posted on CompTIA’s website, and I reviewed my other certification course materials and books I have on offensive security.

5. Did you feel the content related to your current job?

Yes. The skills outlined in CompTIA PenTest+ are useful to anyone in cybersecurity or dealing with cybersecurity concepts.

The skills outlined in CompTIA PenTest+ are useful to anyone in cybersecurity or dealing with cybersecurity concepts.

The skillset definitely aligns to that of a pen tester but can be useful to those who perform the work securing their systems, as it shows a great understanding of how the attack vectors can be taken advantage of.

6. Would you recommend CompTIA PenTest+ to others?

Yes, I definitely would. It is more in depth than you would expect from CompTIA, and nearly half the price of other tests like it. (The CEH voucher runs about $1,199, and the GPEN voucher is $1,899 without an attached course.) I think it’s the best deal for your money in skills versus voucher cost.

7. How do you think CompTIA PenTest+ will help your career?

I’m waiting to see how the corporate and [U.S. Department of Defense (DoD)] markets feel about CompTIA PenTest+ before I make any assumptions, but I believe it can open up some opportunities for me. Editorial Note: CompTIA is in the process of applying to get CompTIA PenTest+ approved for DoD 8570. Stay tuned for updates!

Are you ready to get certified? Download the exam objectives for CompTIA PenTest+ to start studying.