thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Courses  /  CompTIA  /  CompTIA PenTest+
Exam PT0-003PenTest+ V3 CompTIA DoD 8140 / 8570College credit

CompTIA PenTest+

Plan, run and report a penetration test the way clients expect: recon, exploitation, lateral movement and a report that gets things fixed.

5 days, instructor-led In class or live online Class Hub + 90 days Military funding accepted DoD 8570: CSSP Analyst, CSSP Incident Responder, CSSP Auditor Up to 3 college credits

Course overview

Red teamOffensive securityHands-on attack techniques across network, web, cloud and wireless
5 domainsOne examEngagement, recon, vulnerabilities, attacks, post-exploitation
DoD 8140ApprovedISO 17024 accredited

thinQtank® Learning is offering a unique instructor-led training camp that gives students the knowledge and skills needed to plan and scope a penetration test, gather intelligence on a target, find and validate vulnerabilities, exploit them across networks, hosts, web applications, cloud services and wireless, move laterally once inside, and write the report that turns all of it into work the client will actually do. Students run a full engagement against a target environment from first contact to final debrief, which is the part of this work no book teaches.

This course also helps students prepare to take the CompTIA PenTest+ (PT0-003) exam — the hands-on, offensive-security credential approved by the US Department of Defense under directive 8140 / 8570.01-M.

Your certification path

Where this course sits: what to have first, and where it leads.

This courseCompTIA PenTest+Exam PT0-003

Course objectives

What you will be able to do by the end of the class.

Scope and plan an engagement: rules of engagement, shared responsibility, legal agreements and the ethical limits of the work
Apply the recognized testing frameworks — OSSTMM, PTES, CREST, MITRE ATT&CK and the OWASP testing guides
Gather intelligence on a target using passive and active OSINT, and enumerate hosts, services, DNS and users
Run and tune vulnerability scans, then validate the output by hand rather than trusting the scanner
Assess physical security controls, and the exposure of industrial control and embedded systems
Execute network, authentication, host, web application, cloud, wireless and social engineering attacks
Establish persistence, move laterally, escalate privilege and exfiltrate data the way an adversary would
Write and modify scripts in Bash, Python and PowerShell to automate the repetitive parts of a test
Clean up and restore a target environment so the client is left exactly as they were found
Analyze findings, rank them by real business risk, recommend remediation and present the report to a non-technical audience

Who it is for

Who gets the most from this class, and what to know before you start.

Who should attend

  • Penetration testers, red team operators and vulnerability analysts
  • Security analysts and engineers moving from defensive work into offensive testing
  • Security consultants who need a recognized, hands-on credential in front of clients
  • Service members, veterans and military spouses using AF COOL, Army Credentialing Assistance, MyCAA or VET TEC 2.0
  • Anyone whose role requires a DoD 8140 approved offensive-security certification

Prerequisites

  • CompTIA Network+ and Security+, or equivalent knowledge
  • Working familiarity with TCP/IP networking, and with administering both Linux and Windows
  • Some exposure to a scripting language — Bash, Python or PowerShell
  • CompTIA recommends three to four years in a penetration testing role. That is a recommendation, not a bar to entry — this camp is built to take a capable security practitioner there

Course outline

6 modules. Open any one to see what it covers.

01Engagement management
  • Scoping, rules of engagement and legal agreements
  • Testing frameworks: PTES, OSSTMM, MITRE ATT&CK
  • Reporting and communication
02Reconnaissance and enumeration
  • Passive and active OSINT
  • Host, service and DNS enumeration
  • Scripting for recon
03Vulnerability discovery
  • Scanning and tuning scanners
  • Validating findings by hand
  • Physical and ICS exposure
04Network and host attacks
  • Authentication and credential attacks
  • Windows and Linux exploitation
  • Wireless and social engineering
05Web and cloud attacks
  • OWASP web application attacks
  • Cloud and container attacks
  • API testing
06Post-exploitation
  • Persistence and privilege escalation
  • Lateral movement and exfiltration
  • Cleanup and restoration

The full lesson-by-lesson outline is in the course datasheet (PDF).

Course features

How the class is taught, and why it works.

Live, instructor-ledEvery session is taught live by a certified instructor, in the classroom and online at the same time.
Hands-on labsLabs are built into the modules so you practise what you learn.
Exam preparation built inPractice questions and focused review aligned to exam PT0-003.
Class Hub for 90 daysRecordings, materials and practice stay open for the class plus 90 days after it ends.
Attend your waySterling, VA, Atlanta, GA, Burbank, CA, or live online from anywhere.
Funding friendlyMilitary flat rate, thinQflex monthly payments, or a formal quote for your employer.

What you get

Everything below is included in the course price.

Class Hub access for the length of the class plus 90 days
thinQtank® Learning Accelerated Custom Exam Study Guide for the PT0-003 exam
Exam delivery in classroom with 98% success
Custom and focused exam preparation software and materials
Course specific thinQtank® Learning publications to promote a fun and exciting learning
Membership to the thinQtank® Learning University Online
WE DO NOT "TEACH THE TEST" - Students will receive valuable examples and discussion
Receive all reading material and study guides when you register
All courses taught by certified instructors
Additional hours of remote lab access
Custom video recordings with even more in-depth learning of course topics
Customized practice exam software
Digital courseware
Retake any or all portions of the course as many times as you like in person or live on-line for 24 months
Six months mentoring access to our engineers after completing the course

Study plan

How the 5 days run, plus what to do before and after class.

Before class
  • Check the prerequisites above and fill any gaps
  • We send joining details and course materials before day one
Day 1
  • Engagement management
  • Reconnaissance and enumeration
Day 2
  • Vulnerability discovery
  • Network and host attacks
Day 3
  • Web and cloud attacks
  • Post-exploitation
Day 5
  • Final review and exam strategy
After class
  • Class Hub stays open 90 days: recordings, labs and practice
  • Book your exam while the material is fresh

The order of topics can shift with the class; your instructor confirms the schedule on day one.

The certification exam

CompTIA PenTest+ (V3) · exam PT0-003

Exam codePT0-003
QuestionsUp to 90
Time165 minutes
Passing score750 / 900

Exam domains and weighting

1. Attacks and Exploits
35%
2. Reconnaissance and Enumeration
21%
3. Vulnerability Discovery and Analysis
17%
4. Post-Exploitation and Lateral Movement
14%
5. Engagement Management
13%
Format
Multiple choice and performance-based
Voucher
Exam voucher available through thinQtank for $404
Validity
Valid for three years, renewed through CompTIA continuing education

DoD 8140 and college credit

What this certification counts for with the Department of Defense, and toward a degree.

DoD 8140 / 8570 PenTest+ qualifies for 3 of the 14 DoD workforce categories.
Cybersecurity Service Provider Analyst CSSP Analyst
2–5 years typicalGS-11 to GS-12
SOC analyst · Cyber defense analyst · Threat hunter · Watch floor analyst
Typically performs (DCWF): 511 Cyber Defense Analyst
Cybersecurity Service Provider Incident Responder CSSP Incident Responder
3–7 years typicalGS-12 to GS-13
Incident responder · DFIR analyst · CIRT member · Digital forensics examiner
Typically performs (DCWF): 531 Cyber Defense Incident Responder; 212 Cyber Defense Forensics Analyst
Cybersecurity Service Provider Auditor CSSP Auditor
4–8 years typicalGS-12 to GS-13
Security control assessor · Compliance auditor · Red team support · Vulnerability assessment analyst
Typically performs (DCWF): 612 Security Control Assessor; 541 Vulnerability Assessment Analyst

DoD 8570 was replaced by DoD 8140 work roles (contractors since February 2026), but job postings still use these categories. DoD publishes no crosswalk between the two; the work roles shown are what this population typically performs, not an official mapping. Experience figures are typical, not requirements.

College credit Pass the exam and these universities will count it toward a degree. This is what each school publishes about its own transfer policy; the registrar makes the final call.
3credits UMGC
Built into the degree WGU removes a required course
Accepted Purdue Global amount not published

Most schools only count IT certifications earned in the last three to five years (some require them to be current), and several will not award transfer credit once you have enrolled. Get your evaluation done first.

Where it can take you

Roles this certification is commonly asked for.

Penetration TesterFind and exploit weaknesses before attackers do.
Red Team OperatorEmulate adversaries end to end.
Vulnerability Assessment AnalystAssess systems and validate risk.
Security ConsultantTest client environments and deliver findings.
Application Security TesterFocus on web apps and APIs.

Upcoming dates

Every class runs in the classroom and live online at the same time. Pick the dates; choose how you attend when you register.

DatesLocationFormat
Nov 16 – 20, 2026 Sterling, VA Classroom + live online Reserve
Nov 30 – Dec 4, 2026 Atlanta, GA Classroom + live online Reserve
Dec 7 – 11, 2026 Burbank, CA Classroom + live online Reserve
Jan 4 – 8, 2027 Sterling, VA Classroom + live online Reserve
Jan 25 – 29, 2027 Atlanta, GA Classroom + live online Reserve
Feb 1 – 5, 2027 Burbank, CA Classroom + live online Reserve
Mar 1 – 5, 2027 Sterling, VA Classroom + live online Reserve
Mar 15 – 19, 2027 Atlanta, GA Classroom + live online Reserve
Mar 29 – Apr 2, 2027 Burbank, CA Classroom + live online Reserve
Apr 26 – 30, 2027 Sterling, VA Classroom + live online Reserve
May 10 – 14, 2027 Atlanta, GA Classroom + live online Reserve
May 24 – 28, 2027 Burbank, CA Classroom + live online Reserve

11 more dates through December 2027. Ask about a later date.

Paying for it

The price above is our standard rate. These options can bring it down or spread it out.

Military & veterans
$1,500

Flat rate per class when you use Air Force COOL, Army Credentialing Assistance, MyCAA or VET TEC 2.0. Your program confirms eligibility.

Funding details
thinQflex™
Name your price

Paying yourself? Tell us what you can pay and over how many months, up to twelve. We say yes, or come back with terms.

Make an offer
Employer or agency
Formal quote

A formal quote with the course and exam voucher as separate lines, valid 30 days. Group and government pricing available.

Request a quote

How to enroll

Four steps from here to certified.

  1. Pick your datesChoose a class from the dates above, in a classroom or live online.
  2. Reserve or get a quoteReserve your seat, ask for a quote for your employer, or make a thinQflex offer.
  3. Get readyWe confirm your seat and send joining details and materials before day one.
  4. Attend and certifyTake the class, then sit exam PT0-003, with Class Hub open for 90 days after.

Frequently asked questions

Do I need Security+ first?
Network+ and Security+ level knowledge is recommended, plus some scripting exposure. CompTIA suggests three to four years in security.
How hands-on is the class?
Very. You work through recon, exploitation and post-exploitation labs, and practice performance-based questions.
Is the exam voucher included?
The PT0-003 voucher is available through thinQtank for $404. Ask and we will add it.
What does it cost?
The standard price is $2,650; exam voucher available through thinQtank for $404. Military students using AF COOL, Army CA, MyCAA or VET TEC 2.0 pay $1,500, and thinQflex lets you name your own price and monthly payment.
How long is the class?
5 days of live, instructor-led training.
Can I attend live online?
Yes. Every class runs live online at the same time as the classroom, with the same instructor and labs.
How long do I keep access to the materials?
Your Class Hub stays open for the length of the class plus 90 days.
Can I use military funding?
Yes. With Air Force COOL, Army CA, MyCAA or VET TEC 2.0 you pay a flat $1,500 per class.
Can my employer pay?
Yes. Request a quote and we will send a formal one, valid for 30 days.
What if I cannot pay all at once?
Use thinQflex to name your price and spread payments over up to twelve months.
Where are the classrooms?
Sterling, Virginia; Atlanta, Georgia; and Burbank, California. Every class also runs live online, so you can join from anywhere.
What do I need to attend online?
A computer with a reliable internet connection, a headset or speakers, and a microphone. A webcam is recommended.
Will I get a certificate of completion?
Yes. You receive a thinQtank Learning certificate of completion when you finish the class.
Which course should I take next?
Most students go on to CompTIA Security+, CompTIA CySA+, CompTIA SecurityX. Tell us your goal and we will map the path with you.
Do you run private classes for teams?
Yes. We deliver private classes on-site or online for teams and agencies, on your dates. Ask for a quote.
Can you help me choose the right course?
Yes. Call 855-868-4467 or email sasmith@thinqtanklearning.com and we will recommend the right starting point.

Ready to earn your PenTest+?

Next class Nov 16 – 20, 2026 · Sterling, VA and live online.