CompTIA PenTest+: Testing Frameworks & Methodologies

Skillsoft issued completion badges are earned based on viewing the percentage required or receiving a passing score when assessment is required. Organizations need to be aware of the guidelines and tools for conducting penetration tests. There are many penetration testing (pen testing) frameworks and methodologies that are helpful and, in this course, you’ll compare and contrast these different options. First, explore common frameworks including Open Source Security Testing Methodology Manual (OSSTMM), Council of Registered Ethical Security Testers (CREST), Penetration Testing Execution Standard (PTES), MITRE ATT&CK, and OWASP Mobile Application Security Verification Standard (MASVS). Additionally, discover threat modeling frameworks including Damage potential, Reproducibility, Exploitability, Affected users, Discoverability (DREAD), Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, Elevation of privilege (STRIDE), and Operationally Critical Threat, Asset, and Vulnerability Evaluation (OCTAVE). This course is one of a collection that helps prepare learners for the CompTIA PenTest+ (PT0-003) certification exam.