eJPT eJPT Exam Fundamentals and Penetration Testing Methodology 2

Question 1

Which tool is most commonly used in eJPT labs to test connectivity and basic network reachability?

Accepted Answer

ping

Answer

sqlmap

Answer

hydra

Answer

burpsuite

Question 2

What does the term 'attack surface' refer to in penetration testing?

Accepted Answer

All possible entry points an attacker could use to compromise a system

Answer

The physical server hardware

Answer

The GUI interface of a security tool

Answer

The IP address block of a target

Question 3

During an eJPT exam, which notation is used to describe an IP address with its subnet mask in CIDR format?

Accepted Answer

192.168.1.1/24

Answer

192.168.1.1:255.255.255.0

Answer

192.168.1.1@24

Answer

192.168.1.1-24

Question 4

What is the recommended first step when you gain access to a new network segment during an eJPT lab?

Accepted Answer

Enumerate the new segment by scanning for live hosts and services

Answer

Immediately run an exploit

Answer

Exfiltrate all data found

Answer

Disable firewalls

Question 5

What is a 'false positive' in the context of vulnerability scanning?

Accepted Answer

A result that incorrectly identifies a vulnerability that does not actually exist

Answer

A real vulnerability that was missed by the scanner

Answer

A successfully exploited system

Answer

A verified critical finding

Question 6

Which type of report section documents the specific vulnerabilities found, their severity, and remediation steps?

Accepted Answer

Technical Findings

Answer

Executive Summary

Answer

Scope and Rules of Engagement

Answer

Non-Disclosure Agreement