Skip to content

PenTest+ (PT0-003) Exam Format and Objectives

This page explains how the CompTIA PenTest+ (PT0-003) exam is structured — question count and types, duration, and passing score — and lays out the five exam domains and their weightings. It also explains what performance-based questions are, how renewal works, and how to download CompTIA's official exam objectives. Figures that change between exam versions are flagged so you verify them on CompTIA before relying on them.

[!IMPORTANT] Authorised use only. Everything PenTest+ tests is performed in practice only under explicit written authorisation, a defined scope, and agreed Rules of Engagement (RoE). See ../../ceh/00-overview/legal-and-ethics.md.

Verify volatile details. The facts below come from CompTIA's official PenTest+ page and the verified ground truth for this hub. CompTIA rotates exam codes periodically and revises price, scoring, and renewal terms, so re-check anything marked "verify on CompTIA": https://www.comptia.org/en-us/certifications/pentest/

Learning objectives

  • State the PenTest+ exam format: question count, types, and duration.
  • State the PT0-003 passing score (750 on a 100–900 scale) and the recommended experience.
  • List the five PT0-003 domains and their published weightings.
  • Explain what performance-based questions (PBQs) are and why they reward hands-on practice.
  • Describe how to obtain CompTIA's official exam objectives PDF and how renewal (CEUs) works.

Exam format at a glance

Item Detail Note
Exam code PT0-003 Launched 2024-12-17, replacing PT0-002; CompTIA rotates codes periodically
Number of questions Maximum 90 The cap is 90; some forms present fewer
Question types Multiple-choice questions (MCQ) + performance-based questions (PBQs) See PBQ section below
Duration 165 minutes CompTIA official page
Passing score 750 on a 100–900 scale CompTIA official page (checked 2026-09-29)
Recommended experience 3–4 years in a penetration tester job role, with Network+ and Security+ or equivalent knowledge Recommended, not required
Languages English, French, Japanese, Portuguese CompTIA official page (checked 2026-09-29)
Price / renewal Not quoted here — verify on CompTIA Omitted to avoid stale figures

Passing score. CompTIA's PenTest+ page states a passing score of 750 on a scale of 100–900 for PT0-003 (checked 2026-09-29). The score is scaled, so it is not a raw percentage — ignore third-party "you need X% correct" conversions.

The five domains and their weightings

PT0-003 is organised into five domains. CompTIA publishes the following weightings (the percentage of scored content each domain contributes) (verify on CompTIA — weightings change per exam version):

# Domain Weight
1 Engagement Management 13%
2 Reconnaissance and Enumeration 21%
3 Vulnerability Discovery and Analysis 17%
4 Attacks and Exploits 35%
5 Post-exploitation and Lateral Movement 14% 
flowchart TB
    Exam(["PenTest+ PT0-003<br/>scored content (100%)"])
    Exam --> D4["Domain 4<br/>Attacks &<br/>Exploits — 35%"]
    Exam --> D2["Domain 2<br/>Recon &<br/>Enumeration — 21%"]
    Exam --> D3["Domain 3<br/>Vuln Discovery<br/>& Analysis — 17%"]
    Exam --> D5["Domain 5<br/>Post-exploit &<br/>Lateral Move — 14%"]
    Exam --> D1["Domain 1<br/>Engagement<br/>Management — 13%"]

Two takeaways from the weightings:

  • Attacks and Exploits (35%) is by far the single largest domain — over a third of scored content is the hands-on exploitation core. This is where lab practice (in an authorised environment) pays off most.
  • Reconnaissance and Enumeration (21%) plus Vulnerability Discovery and Analysis (17%) together are ~38% of the exam: nearly as much as Attacks and Exploits. Solid information- gathering and analysis underpins everything — and Engagement Management (13%) ensures the planning, ethics, and reporting are never an afterthought.

See ../domains/README.md for the full domain index and the per-domain pages.

What are performance-based questions (PBQs)?

Performance-based questions (PBQs) are interactive tasks that ask you to do something rather than pick an answer — for example, analysing tool or scan output, completing or correcting a short script, ordering the steps of an engagement, matching tools or techniques to a scenario, or interpreting command output. They simulate realistic on-the-job activities.

Key points for planning:

  • PBQs are why hands-on practice matters. A sysadmin who has actually run scans, read output, and written small scripts has a real advantage. The exact number of PBQs on any given form is not published by CompTIA — do not rely on a specific count.
  • A common strategy is to flag and skip time-consuming PBQs, complete the multiple-choice questions first, then return with the remaining time. (Verify whether the current exam delivery permits skipping/returning — CompTIA's interface and rules can change.)

How to get the official exam objectives

CompTIA publishes a free, downloadable exam objectives document (often called the "objectives PDF" or "exam blueprint") for PT0-003. It is the authoritative, comprehensive list of every topic, term, tool, and acronym that can appear on the exam, broken down by domain and sub-objective. It is the single most important study artefact.

To obtain it:

  1. Go to the official CompTIA PenTest+ page: https://www.comptia.org/en-us/certifications/pentest/ (verify — the page layout changes).
  2. Look for "Download the exam objectives" (CompTIA may ask for an email address).
  3. Confirm the document is for PT0-003 — older objectives (e.g., PT0-002) cover a retired exam and differ.

The domain pages in this hub are written toward the PT0-003 objectives, but the objectives PDF is the canonical checklist — use it to track coverage and confirm exact wording, because CompTIA can issue minor revisions.

Renewal and continuing education (CEUs) (verify on CompTIA)

PenTest+ is not permanent; it must be maintained. CompTIA certifications are renewed through the Continuing Education (CE) program, primarily by earning Continuing Education Units (CEUs) over a fixed validity period (for example, by completing training, earning a higher-level certification, or other approved activities).

  • The exact validity period, the number of CEUs required, and any renewal fee are not quoted here — these terms change and must be confirmed on CompTIA's Continuing Education page. Verify on CompTIA.
  • Earning a higher CompTIA certification can also renew PenTest+ automatically under the CE program (verify current rules).

Where to go next

Sources

  • CompTIA — PenTest+ (PT0-003) official certification page (max 90 questions, MCQ + PBQ, 165 minutes, passing score 750 on 100–900, languages, launch date 2024-12-17, five domains and weightings, recommended experience; checked 2026-09-29): https://www.comptia.org/en-us/certifications/pentest/
  • CompTIA — PenTest+ exam objectives (PT0-003) download (authoritative topic blueprint): https://www.comptia.org/en-us/certifications/pentest/
  • CompTIA — Continuing Education (CE) program / CEU renewal terms (validity period, CEU count, fees — verify; not quoted here): https://www.comptia.org/en-us/resources/ce/
  • Verified ground truth for this hub (checked 2026-09-29): PT0-003 launched 2024-12-17 (replacing PT0-002); max 90 questions (MCQ + PBQ); 165 minutes; passing score 750 on a 100–900 scale; English, French, Japanese, Portuguese; domain weights 13 / 21 / 17 / 35 / 14 percent.
  • Volatile specifics not quoted here (retirement date, price, CEU renewal terms) — verify on CompTIA.