CertPath
Browse Certs
CompTIAPT0-003

CompTIA PenTest+ in Lagos

Hands-on penetration testing certification covering planning, scoping, vulnerability scanning, and reporting.

Salary uplift
+$14k
Exam cost
$404
Duration
165 min
Passing score
750
Difficulty
intermediate
View recommended courses
◆ 01 / About

What is CompTIA PenTest+?

CompTIA PenTest+ (PT0-003) is a vendor-neutral, intermediate-level certification that validates your ability to plan, scope, and execute penetration tests across networks, applications, and cloud environments. It covers the full engagement lifecycle — from reconnaissance and exploitation through to reporting and remediation recommendations. In Lagos, where financial institutions, telecoms, and fintech startups are rapidly expanding their digital infrastructure, demand for credentialed penetration testers is accelerating ahead of supply. Holding PenTest+ signals to Nigerian employers and international clients that your skills meet a globally recognised standard, giving you a concrete edge in a market where certified security talent remains scarce.

With an average IT salary of around $16,000/yr in Lagos, the $404 exam fee is a modest upfront cost against a documented average salary uplift of $14,000/yr — that is roughly an 87% income increase from a single certification. In practical terms, you recover the exam cost within days of your first pay rise. Lagos is home to a growing cluster of banks, fintechs, and multinationals that are under increasing regulatory pressure to conduct formal security assessments. Certified pentesters are being hired not just locally but for remote contracts with European and US firms. PenTest+ gives you the verified credentials to compete for both markets, making the ROI case exceptionally strong.

◆ 02 / Exam details

Exam details

Exam cost
$404 USD
Duration
165 min
Passing score
750
Renewal
Every 3 yrs

Prerequisites: Network+, Security+, or 3-4 years hands-on experience

◆ 03 / Study plan

12-week study plan

1
Planning, Scoping, and ReconnaissanceWeeks 1–4
Study engagement scoping, rules of engagement, legal considerations, and compliance frameworks covered in PT0-003 Domain 1Practice passive and active reconnaissance techniques using tools like Maltego, theHarvester, and Shodan against lab targetsReview OSINT methodologies and build a personal cheat sheet of reconnaissance commands you can recall under exam pressure
2
Exploitation, Attacks, and Post-ExploitationWeeks 5–8
Work through network, application, and wireless exploitation techniques; set up a home lab using VirtualBox with Kali Linux and Metasploitable targetsPractice privilege escalation, lateral movement, and persistence techniques on platforms like Hack The Box or TryHackMe, focusing on scenarios that appear in PT0-003 objectivesStudy social engineering attack vectors — phishing, vishing, and physical intrusion — as these carry meaningful weight in the updated PT0-003 exam domain
3
Reporting, Tools Mastery, and Exam ReadinessWeeks 9–12
Practice writing professional pentest reports; PT0-003 includes performance-based questions that test your ability to interpret and communicate findings accuratelyDrill tool-specific knowledge: Nmap, Burp Suite, Metasploit, Netcat, and Wireshark — know what each tool does and when to choose it over alternativesComplete at least three full-length PT0-003 practice exams under timed conditions, review every wrong answer, and focus revision on your two weakest domains before exam day
◆ 04 / Exam tips

Exam tips

Know your tools by flag and output, not just by name — PT0-003 performance-based questions will show you Nmap scan results, Metasploit console output, or Burp Suite intercepts and ask you to interpret or act on them directly.

Study the pentest phases in order and memorise what belongs to each stage; PT0-003 frequently tests whether you can identify which action is appropriate at which point in the engagement lifecycle.

Pay close attention to the reporting and communication domain — many candidates under-prepare here, but PT0-003 includes questions on how to write findings, assign CVSS scores, and communicate risk to non-technical stakeholders.

For performance-based questions that appear at the start of the exam, do not spend more than 3 minutes on any single item before moving on — return to them later, as the multiple-choice section may contain context clues that help you answer them.

Review the PT0-003 exam objectives document from CompTIA directly and cross-reference every tool listed; if a tool appears in the official objectives — such as Responder, BloodHound, or Mimikatz — you must know its purpose and typical use case for the exam.

◆ 05 / FAQ

Frequently asked questions

PenTest+ sits at an intermediate level, harder than Security+ but less specialised than OSCP. PT0-003 includes multiple-choice and performance-based questions that require hands-on tool knowledge, not just theory. Candidates with 3–4 years of practical security experience typically find it manageable with 8–12 weeks of focused study. Without hands-on lab practice, the performance-based questions will be the most challenging part.
◆ 06 / Other certifications in Lagos