PenTest+ exam prep: performance-based labs
In questions like the PenTest+ performance-based ones you pick the next step from scan output, read scripts, recognise payloads and reach the flag on a real target.
Level 301 · 14 lessons · 12 practice labs
Lessons
Decision questions
- Performance-based questions: command, output, decision
- Choosing the next step from scan output
- Choosing the right tool for a scenario
- Recognising an out-of-scope target
- Interpreting Bash, Python and PowerShell snippets
- Short task: order an attack plan from the given outputs
Hands-on questions
- Identifying the payload in a web request
- Recognising the hash type and choosing the right cracking mode
- Finding the privilege escalation path in output
- Matching findings to the right recommendation
- Short task: reach the flag on the target in three steps
Timed practice
- Timed practice: recon and exploitation
- Timed practice: post-exploitation and reporting
- Capstone: a timed set of performance-based questions
Practice labs
- Choose the next step from scan output: For four different scan outputs you choose the most sensible next step and write the scope and risk reason in one line.
- Pick the right tool for the task and try it: For six discovery and validation tasks you pick the right tool and confirm your choice by running two of them on the lab target.
- Order a test plan from given outputs: You put shuffled steps made of recon, validation and reporting outputs into the right order under the scope rules.
- Spot the out-of-scope address: You compare a target list with the scope document and write the two addresses that must not be tested and why.
- Recognise a stop condition and report it properly: In five mid-test scenarios you determine which ones require stopping and write whom you notify and with what information.
- Make the scope call on a shared host: You notice from output that the in-scope site shares a server with other customers and determine with reasons which tests may proceed.
- Explain what a Bash script does: You read a short Bash script line by line and write its purpose, input and the file it produces.
- Predict a Python snippet's output and run it: You first predict the output of a log-parsing script, then run it and note any difference and its cause.
- Determine the intent of a PowerShell sequence: You read the PowerShell commands in an admin script and explain what information it gathers and which log record it would produce.
- Match findings to the right recommendations: You match ten findings to technical, process and people recommendations and score the answer file with a script.
- Group findings by root cause: You sort twelve findings into root causes such as patch management, password policy and configuration standards and write one recommendation per group.
- Four performance-based questions in twenty-five minutes: You complete scope decision, output reading, script interpretation and recommendation matching questions in time and see your score.
About this course
In questions like the PenTest+ performance-based ones you pick the next step from scan output, read scripts, recognise payloads and reach the flag on a real target.
What you will learn
- Decision questions
- Hands-on questions
- Timed practice
Prerequisites
You should be comfortable with the level 101 and 201 topics of the same path.
Lab environment
Lessons run in your own Kali Linux terminal in the browser, connected to a private lab network. Nothing to install.
Frequently asked questions
- Is this course right for my level?
- The course is at level 301; it assumes you know the topics of the lower-level courses.
- Is there anything to install?
- No. Every lesson runs in your own lab environment that opens in the browser.
- How do lessons work?
- Each lesson has 8 to 10 steps and a short quiz. Early steps show the command to type, later steps give less help; if two attempts fail, the solution opens.
- Can I try it for free?
- Yes. The first three lessons of every course are free.