Course Information

  • Sessions 5 days
  • Duration 40 hrs
  • Level Intermediate
  • Assessment 2 hrs

Venue

12 Woodlands Square #07-85/86/87 Woods Square Tower 1, Singapore 737715. 5 mins walk from Woodlands (NS9) MRT station.

The venue is disabled-friendly.

Skills Framework

TSC Title
Security Assessment and Testing
TSC Code
ICT-DIT-4012-1.1

Funding Validity

Funding for this course is valid from 17 Jun 2026 to 16 May 2027. Register and complete the course within this period to qualify for funding support.

Learning Outcomes

By end of the course, learners should be able to:

  • LO1: Design a security testing plan aligning with organizational goals, integrating key methodologies for vulnerability assessments.
  • LO2: Manage and implement vulnerability assessments, utilizing advanced threat modeling and source code techniques.
  • LO3: Conduct authorized penetration tests on complex systems using advanced hacking methods.
  • LO4: Analyze incident data to identify emerging trends in vulnerability exploitation and hacking techniques.
  • LO5: Identify the organization's systems' susceptibilities to specific hacking techniques and attacks, refining test plans to address emerging advanced hacking actions

Course Brochure

Certification

  • Certificate of Achievement from Tertiary Infotech Academy Pte Ltd - Upon meeting at least 75% attendance and passing the assessment(s), participants will receive a Certificate of Achievement from Tertiary Infotech Academy Pte Ltd.

CompTIA Authorised Delivery Partner

We are an Authorised CompTIA Delivery Partner. To get the official CompTIA certification, please register your certification exam at a Pearson VUE test center.

CASL - CompTIA PenTest+ Training

Course Code: TGS-2026064471
  • CASL
  • SFC
  • PSEA
  • UTAP
  • SFEC
  • Absentee Payroll
  • MCES
Share

What's This Course About

This CompTIA PenTest+ Exam Prep course is meticulously designed to equip learners with profound knowledge and practical skills in penetration testing and vulnerability assessment. The course begins with an in-depth exploration of planning and scoping for penetration tests, ensuring alignment with organizational goals and compliance with regulatory frameworks. Participants will learn about various aspects of a pen test, including establishing rules of engagement, managing resources and budgets, understanding legal and service provider agreements, and ethical considerations. Furthermore, the course delves into the intricacies of information gathering and vulnerability scanning, where learners will gain hands-on experience with tools like Wireshark and Nmap, and understand the nuances of both passive and active reconnaissance.

Advancing to more complex topics, the course covers a range of attacks and exploits, including network-based, wireless, web, and database attacks, as well as post-exploitation strategies. Participants will be skilled in using advanced hacking methods, identifying vulnerabilities, and tailoring test plans to combat emerging hacking techniques. The final modules focus on critical post-testing processes such as report writing, presenting findings, and recommending mitigation strategies, along with an overview of essential tools and code analysis for effective penetration testing. By the end of this course, participants will be adept at conducting authorized penetration tests, analyzing incident data, and employing advanced threat modeling techniques, fully preparing them for the CompTIA PenTest+ exam.

Bonus: Free Practice Exams

Get exam-ready on our Practice Exam Portal — train in realistic Practice Mode and timed Exam Mode, then retake them as many times as you like before the real exam.

Start Practising →

CASL Funding

Full Fee $3,000.00 Before GST
GST $270.00 9% of fee
Baseline Nett $1,770.00 SG/PR age 21+ · 50% funded
MCES / SME Nett $1,170.00 SG age 40+ · 70% funded
SkillsFuture Enterprise Credit (SFEC)

Eligible companies can use their $10,000 SFEC to cover up to 90% of out-of-pocket course fees for classes ending on or before 30 Nov 2026. A redesigned SFEC starts on 1 Dec 2026.

View on SkillsFuture for Business

SkillsFuture Credit (SFC)

Eligible Singapore Citizens can use their SFC to offset course fee payable after funding but the $4,000 Additional SFC (Mid-Career Support) cannot be used.

Direct Application on SkillsFuture Portal

UTAP

Eligible NTUC members can apply for 50% of the unfunded fee from UTAP, capped up to $250/year and for members aged 40 and above, capped up to $500/year.

Submit UTAP Claim

PSEA

Eligible Singapore Citizens can use their PSEA funds to offset course fee payable after funding.

Check PSEA Eligibility

  • Scroll down to “Keyword Tags” to verify for PSEA eligibility.
  • If there is “PSEA” under keyword tags, the course is eligible for PSEA.

Once you are eligible for PSEA, please download and fill up the PSEA Withdrawal Form, then submit the completed form to us:

PSEA Withdrawal FormSubmit PSEA Form

Course FeeBefore Funding

$3,000.00 (GST-exclusive)
$3,270.00 (GST-inclusive)

Course Date

* Required Fields

Additional Note

Please bring your own laptop for hands-on training. If you don't have laptop, we can provide spare laptop for training use.

Post-Course Support

  • We provide free consultation related to the subject matter after the course.
  • Please email your queries to enquiry@tertiaryinfotech.com and we will forward your queries to the subject matter experts.

Cancellation & Reschedule Policy

  • You can register your interest without upfront payment. There is no penalty for withdrawal of the course before the class commences.
  • We reserve the right to cancel or re-schedule the course due to unforeseen circumstances. If the course is cancelled, we will refund 100% for any paid amount.
  • Note the venue of the training is subject to changes due to availability of the classroom.

Course Details

Course Details

What You'll Learn

Topic 1: Planning and Scoping

  • Planning a pen test
  • Rules of engagement
  • Regulatory compliance
  • Resources and budgets
  • Impact and constraints
  • Support resources
  • Legal groundwork
  • Service provider agreements
  • Standards and methodologies
  • Environment and scoping considerations
  • Ethical mindset
  • Lab environment setup
  • Project strategy and risk
  • Scope vulnerabilities
  • Compliance-based assessments

Topic 2: Information Gathering and Vulnerability Scanning

  • Scanning and enumeration
  • Scanning and demo
  • Packet investigation
  • Packet inspection demo
  • Lab setup
  • Lab: Wireshark
  • Application and open-source resources
  • Passive reconnaissance
  • Active reconnaissance
  • Vulnerability scanning
  • Vulnerability scanning demo
  • Lab: Network basis
  • Lab: Nmap discovery
  • Target considerations
  • Analysing scan output
  • Nmap scoping and output options
  • Nmap timing and performance options
  • Prioritization of vulnerabilities
  • Common attack techniques
  • Automating vulnerability scans
  • Credential attacks
  • Lab: Password cracking
  • Lab: Secure Sockets Layer
  • Lab: Routing basics

Topic 3: Attacks and Exploits

  • Network-based attacks
  • Wireless and RF Attacks
  • Web and Database Attacks
  • Attacking the cloud
  • Specialised and Fragile Systems
  • Social Engineering and Physical attacks
  • Post-Exploitation

Topic 4: Reporting and Communication

  • Report writing
  • Important components of written reports
  • Mitigation strategies
  • Technical and physical controls
  • Administrative and operational controls
  • Communication
  • Presentation of findings
  • Post-report activities
  • Data destruction process

Topic 5: Tools and Code Analysis

  • Using scripting in pen testing
  • Bash scripting basics
  • Python scripts
  • Tools inventory
  • Pen testing toolbox
  • Scanners and credential tools
  • Code-tracking tools
  • Wireless and web pen testing tools
  • Remote access tools
  • Analysers and mobile pen testing tools

Assessment

  • Written Exam
  • Practical Exam

Course Info

Minimum Entry Requirement

Knowledge and Skills

  • Able to operate computer functions with minimum Computer Literacy Level 2 based on ICAS Computer Skills Assessment Framework
  • Minimum 3 GCE ‘O’ Levels Passes including English or WPL Level 5 (Average of Reading, Listening, Speaking & Writing Scores)

Attitude

  • Positive Learning Attitude
  • Enthusiastic Learner

Experience

  • Minimum of 1 year of working experience.

Minimum Software/Hardware Requirement

Software:

You will need the following for this course:

Hardware: Windows PC or Mac laptop

Funding Eligibility Criteria

Self-sponsored learners (individuals)

  • Singapore Citizens and Singapore Permanent Residents aged 21 and above.
  • Up to 50% course fee funding. Singapore Citizens aged 40 and above receive up to 70% under the Mid-career Enhanced Subsidy (MCES).
  • Singapore Citizens aged 25 and above can pay the remaining fee with SkillsFuture Credit.

Company-sponsored learners

  • Singapore Citizens and Singapore Permanent Residents who are direct employees of the sponsoring company.
  • Up to 50% course fee funding, or up to 70% for employees of SMEs (Enhanced Training Support for SMEs) and for Singapore Citizens aged 40 and above. An SME has no more than 200 employees or an annual turnover of no more than $100 million.
  • Employers can also claim Absentee Payroll funding for employees who attend during working hours.
  • Eligible companies can offset their out-of-pocket fees with SkillsFuture Enterprise Credit (SFEC).

Conditions for all funded learners

  • Attendance is taken digitally with Singpass for every session, including the assessment.
  • You must complete the course and pass all assessments (assessed as Competent).
  • If these conditions are not met, the funding is clawed back and the learner or employer pays the full course fee.
  • 9% GST is charged on the full course fee before funding.
  • Promo and discount codes cannot be used on funded courses.
  • Any balance after funding can be paid in cash, with SkillsFuture Credit, with PSEA (Singapore Citizens with a PSEA), or partly reimbursed by UTAP for NTUC members.

How to Apply SkillsFuture Credit Claim for Individuals

Singapore Citizens aged 25 and above can use their SkillsFuture Credit (base tier) to pay the course fee after funding. The $4,000 mid-career top-up cannot be used for this course.

  1. Register for this course as self-sponsored and tell us you will use SkillsFuture Credit. Do not pay the amount you plan to claim.
  2. We email you an invoice showing the course fee after funding.
  3. From 60 days before the course starts, and no later than the course start date, log in to MySkillsFuture with Singpass and click Claim credits.
  4. Click Submit a Claim and search for this course by its course code, TGS-2026064471.
  5. Select your class start date, enter the course fee payable after funding and the amount of credit to claim, then upload the invoice (PDF, JPG or PNG, under 4MB).
  6. Review, accept the terms and click Agree and Submit. The credit is paid directly to us; processing can take up to 14 working days.

Changing or withdrawing: cancel the claim on MySkillsFuture at least one day before the course starts. If your class date changes, cancel the claim and submit a new one with the new date.

How to Apply SkillsFuture Enterprise Credit (SFEC)

SFEC helps companies pay for employee training. The current SFEC ends on 30 November 2026, and a redesigned SFEC starts on 1 December 2026.

Current SFEC: classes ending on or before 30 November 2026

  • Eligible companies received a one-off $10,000 credit, notified by letter to their Corppass administrator. Eligibility generally required at least 3 Singapore Citizen or PR employees and Skills Development Levy contributions.
  • SFEC covers up to 90% of the company's out-of-pocket course fee after other subsidies.
  1. Check your company's SFEC eligibility and balance on EnterpriseSG.
  2. Register your Singapore Citizen or PR employee for a class that ends by 30 November 2026, as company-sponsored, and pay the course fee after funding.
  3. Your employee attends and completes the course. We submit the attendance and assessment results to SWDA.
  4. No separate claim is needed. SFEC is calculated automatically once the course fee grant is approved and is paid quarterly to your company's IRAS GIRO or PayNow Corporate account.

Any unused balance of the current SFEC expires on 30 November 2026.

Redesigned SFEC from 1 December 2026

Companies with at least 3 resident employees receive a fresh $10,000 in an online SFEC wallet that offsets out-of-pocket fees upfront at enrolment, instead of reimbursing them afterwards. SWDA has not yet published the support rates and claim steps; see OurWorkforce or our SFEC guide.

How to Apply UTAP (NTUC Members)

NTUC members can claim 50% of the unfunded course fee under the Union Training Assistance Programme (UTAP), capped at $250 a year (aged below 40) or $500 a year (aged 40 and above). The cap is shared with UTAP claims for AI tool subscriptions.

Eligibility: you must be an NTUC member paying full membership fees, with your membership paid up before and during the course and when you claim. The course must not be fully paid for by your employer or another source.

  1. Make sure your NTUC membership is paid up before the course starts.
  2. Register for this course with us and pay the course fee after funding and SkillsFuture Credit.
  3. Attend at least 75% of the course and sit all assessments.
  4. Within 6 months after the course ends, go to the NTUC U Portal, open UTAP under E-services, log in with Singpass and choose Course Fee Claim.
  5. Enter the nett course fee you paid (after all subsidies and SkillsFuture Credit, including GST), and upload your invoice or receipt and your certificate or result slip (PDF, JPG or PNG, up to 5MB each).
  6. NTUC usually pays the claim within 4 weeks of submission.

Read more in our UTAP guide.

How to Apply PSEA

Singapore Citizens with a Post-Secondary Education Account (PSEA), which stays open until around the year you turn 31, can use it to pay the course fee after funding for PSEA-approved courses. You can also use a sibling's PSEA after your own has been used up.

  1. Check that this course shows the PSEA tag on its MySkillsFuture page.
  2. Check your PSEA balance on MOE's Student Finance System with Singpass.
  3. Download and complete the PSEA withdrawal form, then submit it to us.
  4. We submit the withdrawal request to MOE. You (and your sibling, if you are using their account) authorise it in the Student Finance System. Nothing is withdrawn without this authorisation.
  5. MOE pays us directly. If you have already paid, we refund the amount covered by PSEA.

More details: MOE PSEA overview.

Appeal Process

If you disagree with an assessment decision, you have the right to appeal.

  1. When the assessor gives you feedback, say whether you agree with the outcome. If you agree, you and the assessor sign the Assessment Summary Record; if you disagree, do not sign it.
  2. Discuss the decision with the assessor or the assessment manager first.
  3. If you are still not satisfied, tell the assessor you intend to appeal. The assessor records this in the feedback section of the Assessment Summary Record and informs the assessment manager.
  4. Lodge your appeal within 7 days, giving your reasons, using the Candidate Appeal Form. The assessor can help you write and lodge it.
  5. An Assessment Appeal Panel reviews the information from you and the assessor and makes a decision. A record of the appeal and its outcome is kept.
  6. You will be told the outcome within 2 weeks of lodging the appeal. The panel's decision is final.

Job Roles

Job Roles

  • Penetration Tester
  • Vulnerability Assessor
  • Information Security Analyst
  • Cybersecurity Consultant
  • Security Systems Administrator
  • Network Security Engineer
  • IT Security Manager
  • Cybersecurity Analyst
  • Ethical Hacker
  • Incident Response Analyst
  • Security Auditor
  • Compliance Analyst
  • Risk Assessment Specialist
  • Cybersecurity Architect
  • Cybersecurity Trainer
  • Forensic Analyst
  • Security Software Developer
  • Security Operations Center (SOC) Analyst
  • Application Security Tester
  • Cyber Threat Intelligence Analyst

Trainers

Trainers

Dr. Muhammed Siraj is an experienced cybersecurity practitioner and academic with over 15 years of expertise in ethical hacking, digital forensics, and IT infrastructure security. He holds an MSc in Information and Communication Technology from Aalborg University in Denmark and is currently pursuing his PhD at Universiti Putra Malaysia, specializing in blockchain and cybersecurity. As Head of IT Support and a Senior Lecturer at Wisconsin International University College, Ghana, he has designed and delivered advanced cybersecurity and digital forensics programs for professionals across the education, finance, and law enforcement sectors. He is also a Certified Ethical Hacker (CEH) and Computer Hacking Forensic Investigator (CHFI), with extensive experience in deploying open-source security solutions and managing enterprise networks.
In “CompTIA PenTest+ Training,” Dr. Siraj brings his deep understanding of penetration testing, ethical hacking, and vulnerability assessment to help learners master offensive security methodologies. His training focuses on real-world threat simulations, security audit practices, and post-exploitation analysis, preparing participants to identify, mitigate, and defend against advanced cyber threats. By integrating his academic rigor with hands-on experience, he empowers cybersecurity professionals to build resilience and expertise in ethical hacking and network defense.

Mohan Pothula is a cybersecurity and cloud infrastructure specialist with more than 15 years of experience across enterprise systems, network security, and DevSecOps. He has managed IT infrastructure and cybersecurity operations for multinational organizations, focusing on compliance, threat mitigation, and secure architecture design. Mohan is a CompTIA-certified instructor with additional credentials in AWS, Azure, and Linux systems administration. His professional focus lies in building secure, scalable environments that meet modern enterprise and regulatory requirements.
In “CompTIA PenTest+ Training,” Mohan delivers practical, scenario-based lessons that bridge cybersecurity theory with hands-on penetration testing. His sessions guide learners through ethical hacking tools, vulnerability exploitation, and remediation planning within enterprise systems. With a strong foundation in both infrastructure and security domains, he equips participants to perform effective penetration tests, identify system weaknesses, and design resilient defense strategies aligned with global cybersecurity standards.

Truman Ng is a senior technology consultant, AI systems integrator, and cybersecurity expert with over two decades of experience in IT infrastructure, automation, and secure cloud deployment. Holding professional certifications including PMP, ACTA, and Huawei HCIE, he has trained numerous organizations in network defense, DevSecOps, and AI-enabled security systems. His work integrates enterprise architecture with automation to enhance data security and system reliability.
In “CompTIA PenTest+ Training,” Truman combines cybersecurity frameworks with automation to train learners in performing intelligent penetration tests using modern tools and methodologies. His sessions emphasize secure system orchestration, network vulnerability assessments, and incident response planning. Through real-world case studies, he enables participants to conduct structured, repeatable security tests and implement proactive threat mitigation strategies in enterprise IT environments.

Agus Salim is an experienced IT solutions and cybersecurity professional with a strong foundation in cloud infrastructure and project management. With over a decade of experience in systems integration, software development, and IT security across both enterprise and consulting environments, he brings a practical understanding of secure system design and deployment. His credentials include PMP, CompTIA Security+, CEH, and AWS Certified Cloud Practitioner, reflecting his balanced expertise in governance, risk management, and cloud operations. Agus has worked with leading organizations such as Citi and Check Point Software Technologies, providing hands-on technical and security support across multi-cloud platforms.
Alec Tan is an IT trainer and systems engineer with over 20 years of experience spanning IT technical support, system integration, and IT training. He holds multiple CompTIA certifications, including A+, Network+, and Server+, and is also WSQ ACLP-certified, equipping him with both the technical expertise and the pedagogical skills to deliver effective training. His professional career includes roles as a Network Systems Engineer at McKinn International and freelance IT trainer at Nexus Academy, where he taught Office 365, Big Data, Artificial Intelligence, and CompTIA certification programs. With strong technical competencies in Microsoft Windows Server, desktop and laptop support, and IT infrastructure management, Alec brings a wealth of hands-on experience to Security+ training. His teaching emphasizes practical learning, covering key Security+ domains such as threat management, identity access, cryptography, and risk mitigation. By combining deep technical knowledge with a learner-focused approach, Alec ensures participants are well-prepared to achieve Security+ certification and apply cybersecurity principles in real-world IT environments.

Review

Write Your Own Review

You're reviewing: CASL - CompTIA PenTest+ Training

How do you rate this product? *

  1 star 2 stars 3 stars 4 stars 5 stars
1. Do you find the course meet your expectation?
2. Do you find the trainer knowledgeable in this subject?
3. How do you find the training environment