Course Details
Course Details
What You'll Learn
Topic 1: Planning and Scoping
- Planning a pen test
- Rules of engagement
- Regulatory compliance
- Resources and budgets
- Impact and constraints
- Support resources
- Legal groundwork
- Service provider agreements
- Standards and methodologies
- Environment and scoping considerations
- Ethical mindset
- Lab environment setup
- Project strategy and risk
- Scope vulnerabilities
- Compliance-based assessments
Topic 2: Information Gathering and Vulnerability Scanning
- Scanning and enumeration
- Scanning and demo
- Packet investigation
- Packet inspection demo
- Lab setup
- Lab: Wireshark
- Application and open-source resources
- Passive reconnaissance
- Active reconnaissance
- Vulnerability scanning
- Vulnerability scanning demo
- Lab: Network basis
- Lab: Nmap discovery
- Target considerations
- Analysing scan output
- Nmap scoping and output options
- Nmap timing and performance options
- Prioritization of vulnerabilities
- Common attack techniques
- Automating vulnerability scans
- Credential attacks
- Lab: Password cracking
- Lab: Secure Sockets Layer
- Lab: Routing basics
Topic 3: Attacks and Exploits
- Network-based attacks
- Wireless and RF Attacks
- Web and Database Attacks
- Attacking the cloud
- Specialised and Fragile Systems
- Social Engineering and Physical attacks
- Post-Exploitation
Topic 4: Reporting and Communication
- Report writing
- Important components of written reports
- Mitigation strategies
- Technical and physical controls
- Administrative and operational controls
- Communication
- Presentation of findings
- Post-report activities
- Data destruction process
Topic 5: Tools and Code Analysis
- Using scripting in pen testing
- Bash scripting basics
- Python scripts
- Tools inventory
- Pen testing toolbox
- Scanners and credential tools
- Code-tracking tools
- Wireless and web pen testing tools
- Remote access tools
- Analysers and mobile pen testing tools
Assessment
- Written Exam
- Practical Exam
Course Info
Minimum Entry Requirement
Knowledge and Skills
- Able to operate computer functions with minimum Computer Literacy Level 2 based on ICAS Computer Skills Assessment Framework
- Minimum 3 GCE ‘O’ Levels Passes including English or WPL Level 5 (Average of Reading, Listening, Speaking & Writing Scores)
Attitude
- Positive Learning Attitude
- Enthusiastic Learner
Experience
- Minimum of 1 year of working experience.
Minimum Software/Hardware Requirement
Software:
You will need the following for this course:
- Oracle VirtualBox – free
- Kali Linux – free, installed as a virtual machine
Hardware: Windows PC or Mac laptop
Funding Eligibility Criteria
Self-sponsored learners (individuals)
- Singapore Citizens and Singapore Permanent Residents aged 21 and above.
- Up to 50% course fee funding. Singapore Citizens aged 40 and above receive up to 70% under the Mid-career Enhanced Subsidy (MCES).
- Singapore Citizens aged 25 and above can pay the remaining fee with SkillsFuture Credit.
Company-sponsored learners
- Singapore Citizens and Singapore Permanent Residents who are direct employees of the sponsoring company.
- Up to 50% course fee funding, or up to 70% for employees of SMEs (Enhanced Training Support for SMEs) and for Singapore Citizens aged 40 and above. An SME has no more than 200 employees or an annual turnover of no more than $100 million.
- Employers can also claim Absentee Payroll funding for employees who attend during working hours.
- Eligible companies can offset their out-of-pocket fees with SkillsFuture Enterprise Credit (SFEC).
Conditions for all funded learners
- Attendance is taken digitally with Singpass for every session, including the assessment.
- You must complete the course and pass all assessments (assessed as Competent).
- If these conditions are not met, the funding is clawed back and the learner or employer pays the full course fee.
- 9% GST is charged on the full course fee before funding.
- Promo and discount codes cannot be used on funded courses.
- Any balance after funding can be paid in cash, with SkillsFuture Credit, with PSEA (Singapore Citizens with a PSEA), or partly reimbursed by UTAP for NTUC members.
How to Apply SkillsFuture Credit Claim for Individuals
Singapore Citizens aged 25 and above can use their SkillsFuture Credit (base tier) to pay the course fee after funding. The $4,000 mid-career top-up cannot be used for this course.
- Register for this course as self-sponsored and tell us you will use SkillsFuture Credit. Do not pay the amount you plan to claim.
- We email you an invoice showing the course fee after funding.
- From 60 days before the course starts, and no later than the course start date, log in to MySkillsFuture with Singpass and click Claim credits.
- Click Submit a Claim and search for this course by its course code, TGS-2026064471.
- Select your class start date, enter the course fee payable after funding and the amount of credit to claim, then upload the invoice (PDF, JPG or PNG, under 4MB).
- Review, accept the terms and click Agree and Submit. The credit is paid directly to us; processing can take up to 14 working days.
Changing or withdrawing: cancel the claim on MySkillsFuture at least one day before the course starts. If your class date changes, cancel the claim and submit a new one with the new date.
How to Apply SkillsFuture Enterprise Credit (SFEC)
SFEC helps companies pay for employee training. The current SFEC ends on 30 November 2026, and a redesigned SFEC starts on 1 December 2026.
Current SFEC: classes ending on or before 30 November 2026
- Eligible companies received a one-off $10,000 credit, notified by letter to their Corppass administrator. Eligibility generally required at least 3 Singapore Citizen or PR employees and Skills Development Levy contributions.
- SFEC covers up to 90% of the company's out-of-pocket course fee after other subsidies.
- Check your company's SFEC eligibility and balance on EnterpriseSG.
- Register your Singapore Citizen or PR employee for a class that ends by 30 November 2026, as company-sponsored, and pay the course fee after funding.
- Your employee attends and completes the course. We submit the attendance and assessment results to SWDA.
- No separate claim is needed. SFEC is calculated automatically once the course fee grant is approved and is paid quarterly to your company's IRAS GIRO or PayNow Corporate account.
Any unused balance of the current SFEC expires on 30 November 2026.
Redesigned SFEC from 1 December 2026
Companies with at least 3 resident employees receive a fresh $10,000 in an online SFEC wallet that offsets out-of-pocket fees upfront at enrolment, instead of reimbursing them afterwards. SWDA has not yet published the support rates and claim steps; see OurWorkforce or our SFEC guide.
How to Apply UTAP (NTUC Members)
NTUC members can claim 50% of the unfunded course fee under the Union Training Assistance Programme (UTAP), capped at $250 a year (aged below 40) or $500 a year (aged 40 and above). The cap is shared with UTAP claims for AI tool subscriptions.
Eligibility: you must be an NTUC member paying full membership fees, with your membership paid up before and during the course and when you claim. The course must not be fully paid for by your employer or another source.
- Make sure your NTUC membership is paid up before the course starts.
- Register for this course with us and pay the course fee after funding and SkillsFuture Credit.
- Attend at least 75% of the course and sit all assessments.
- Within 6 months after the course ends, go to the NTUC U Portal, open UTAP under E-services, log in with Singpass and choose Course Fee Claim.
- Enter the nett course fee you paid (after all subsidies and SkillsFuture Credit, including GST), and upload your invoice or receipt and your certificate or result slip (PDF, JPG or PNG, up to 5MB each).
- NTUC usually pays the claim within 4 weeks of submission.
Read more in our UTAP guide.
How to Apply PSEA
Singapore Citizens with a Post-Secondary Education Account (PSEA), which stays open until around the year you turn 31, can use it to pay the course fee after funding for PSEA-approved courses. You can also use a sibling's PSEA after your own has been used up.
- Check that this course shows the PSEA tag on its MySkillsFuture page.
- Check your PSEA balance on MOE's Student Finance System with Singpass.
- Download and complete the PSEA withdrawal form, then submit it to us.
- We submit the withdrawal request to MOE. You (and your sibling, if you are using their account) authorise it in the Student Finance System. Nothing is withdrawn without this authorisation.
- MOE pays us directly. If you have already paid, we refund the amount covered by PSEA.
More details: MOE PSEA overview.
Appeal Process
If you disagree with an assessment decision, you have the right to appeal.
- When the assessor gives you feedback, say whether you agree with the outcome. If you agree, you and the assessor sign the Assessment Summary Record; if you disagree, do not sign it.
- Discuss the decision with the assessor or the assessment manager first.
- If you are still not satisfied, tell the assessor you intend to appeal. The assessor records this in the feedback section of the Assessment Summary Record and informs the assessment manager.
- Lodge your appeal within 7 days, giving your reasons, using the Candidate Appeal Form. The assessor can help you write and lodge it.
- An Assessment Appeal Panel reviews the information from you and the assessor and makes a decision. A record of the appeal and its outcome is kept.
- You will be told the outcome within 2 weeks of lodging the appeal. The panel's decision is final.
Job Roles
Job Roles
Trainers
Trainers
Dr. Muhammed Siraj is an experienced cybersecurity practitioner and academic with over 15 years of expertise in ethical hacking, digital forensics, and IT infrastructure security. He holds an MSc in Information and Communication Technology from Aalborg University in Denmark and is currently pursuing his PhD at Universiti Putra Malaysia, specializing in blockchain and cybersecurity. As Head of IT Support and a Senior Lecturer at Wisconsin International University College, Ghana, he has designed and delivered advanced cybersecurity and digital forensics programs for professionals across the education, finance, and law enforcement sectors. He is also a Certified Ethical Hacker (CEH) and Computer Hacking Forensic Investigator (CHFI), with extensive experience in deploying open-source security solutions and managing enterprise networks.
In “CompTIA PenTest+ Training,” Dr. Siraj brings his deep understanding of penetration testing, ethical hacking, and vulnerability assessment to help learners master offensive security methodologies. His training focuses on real-world threat simulations, security audit practices, and post-exploitation analysis, preparing participants to identify, mitigate, and defend against advanced cyber threats. By integrating his academic rigor with hands-on experience, he empowers cybersecurity professionals to build resilience and expertise in ethical hacking and network defense.
Mohan Pothula is a cybersecurity and cloud infrastructure specialist with more than 15 years of experience across enterprise systems, network security, and DevSecOps. He has managed IT infrastructure and cybersecurity operations for multinational organizations, focusing on compliance, threat mitigation, and secure architecture design. Mohan is a CompTIA-certified instructor with additional credentials in AWS, Azure, and Linux systems administration. His professional focus lies in building secure, scalable environments that meet modern enterprise and regulatory requirements.
In “CompTIA PenTest+ Training,” Mohan delivers practical, scenario-based lessons that bridge cybersecurity theory with hands-on penetration testing. His sessions guide learners through ethical hacking tools, vulnerability exploitation, and remediation planning within enterprise systems. With a strong foundation in both infrastructure and security domains, he equips participants to perform effective penetration tests, identify system weaknesses, and design resilient defense strategies aligned with global cybersecurity standards.
Truman Ng is a senior technology consultant, AI systems integrator, and cybersecurity expert with over two decades of experience in IT infrastructure, automation, and secure cloud deployment. Holding professional certifications including PMP, ACTA, and Huawei HCIE, he has trained numerous organizations in network defense, DevSecOps, and AI-enabled security systems. His work integrates enterprise architecture with automation to enhance data security and system reliability.
In “CompTIA PenTest+ Training,” Truman combines cybersecurity frameworks with automation to train learners in performing intelligent penetration tests using modern tools and methodologies. His sessions emphasize secure system orchestration, network vulnerability assessments, and incident response planning. Through real-world case studies, he enables participants to conduct structured, repeatable security tests and implement proactive threat mitigation strategies in enterprise IT environments.
Review
Write Your Own Review
- Recommended Courses
- Related Courses