Ver el plan de examen oficial en Cert Atlas
Ver
EC-Council CPENT Certified Penetration Testing Professional Exam Practice Test
Descripción: Preparación para el EC-Council CPENT que cubre pruebas de penetración avanzadas, pivotación doble, explotación de binarios, técnicas de evasión, ataques a Active Directory y explotación de dispositivos IoT.
Examen de certificación
Professional
Nivel
Oportunidades profesionales y salario
Junior Penetration TesterEthical Hacker / Penetration TesterSenior Security Consultantgrowing mercado
Plan de Estudio
01Active Directory Penetration TestingAD reconnaissance and enumeration, Password spraying and hash extraction, Kerberos attacks (Kerberoasting, Golden/Silver Ticket), Lateral movement in AD
02API and JSON Web Token Penetration TestingAPI reconnaissance, Authentication and authorization testing, JWT security evaluation
03Introduction to Penetration Testing and MethodologiesPrinciples and objectives of penetration testing, Penetration testing methodologies and frameworks (MITRE ATT&CK), Compliance-driven penetration testing
04IoT Penetration TestingIoT firmware acquisition, extraction, and analysis, IoT network and protocol security testing, Persistence in IoT environments
05Lateral Movement and PivotingPass-the-Hash, Pass-the-Ticket attacks, Advanced pivoting and tunneling (HTTP, DNS, SSH, ICMP), Double pivoting
06Linux Exploitation and Privilege EscalationLinux reconnaissance and vulnerability scanning, Initial access to Linux systems, Linux privilege escalation
07Open-Source Intelligence (OSINT)OSINT on target domain, web, and employees, OSINT automation tools, Attack surface mapping
08Penetration Testing Scoping and EngagementPre-engagement activities and RFP response, Rules of Engagement (ROE) drafting, Legal and regulatory considerations
09Perimeter Defense Evasion TechniquesFirewall penetration testing, IDS evasion techniques, Router and switch security testing
10Report Writing and Post-Testing ActionsReport structure and components, Report development and delivery, Post-testing actions, retesting, and validation
11Reverse Engineering, Fuzzing, and Binary ExploitationLinux and Windows binary analysis, Buffer overflow and heap overflow exploitation, Application fuzzing
12Social Engineering Penetration TestingOff-site social engineering (phishing, phone), On-site social engineering, Countermeasures documentation
13Web Application Penetration TestingWeb application footprinting and enumeration, Vulnerability scanning (OWASP framework), SQL injection and other injection vulnerabilities, Business logic and client-side testing
14Windows Exploitation and Privilege EscalationWindows reconnaissance and vulnerability assessment, Privilege escalation and UAC bypass, Post-exploitation and antivirus evasion
Recursos de Estudio
EC-Council Official Courseware
Instructor-led and iLearn self-paced options
Preguntas Frecuentes
Reseñas y Calificaciones
Aún sin reseñas
¡Sé el primero en reseñar este examen y ayuda a otros estudiantes!
Comparte Tu Experiencia
Inicia sesión para dejar una reseña
Comparte tu experiencia y ayuda a otros estudiantes a tomar decisiones informadas.
¿No ves tu examen?
Crea un examen de práctica con tu propio material de estudio.