eJPT eJPT Exam Fundamentals and Penetration Testing Methodology 2 — Questions and Answers
Question 1: Which tool is most commonly used in eJPT labs to test connectivity and basic network reachability?
- sqlmap
- ping (Correct answer)
- hydra
- burpsuite
Correct answer: ping
The ping command sends ICMP echo requests to verify that a target host is reachable over the network.
Question 2: What does the term 'attack surface' refer to in penetration testing?
- The physical server hardware
- All possible entry points an attacker could use to compromise a system (Correct answer)
- The GUI interface of a security tool
- The IP address block of a target
Correct answer: All possible entry points an attacker could use to compromise a system
The attack surface encompasses all exposed points — open ports, services, interfaces, and input vectors — that an attacker could exploit.
Question 3: During an eJPT exam, which notation is used to describe an IP address with its subnet mask in CIDR format?
- 192.168.1.1:255.255.255.0
- 192.168.1.1/24 (Correct answer)
- 192.168.1.1@24
- 192.168.1.1-24
Correct answer: 192.168.1.1/24
CIDR (Classless Inter-Domain Routing) notation combines the IP address and prefix length with a slash, e.g., 192.168.1.1/24.
Question 4: What is the recommended first step when you gain access to a new network segment during an eJPT lab?
- Immediately run an exploit
- Enumerate the new segment by scanning for live hosts and services (Correct answer)
- Exfiltrate all data found
- Disable firewalls
Correct answer: Enumerate the new segment by scanning for live hosts and services
When pivoting to a new network segment, enumeration of live hosts and services helps build a complete picture before exploitation.
Question 5: What is a 'false positive' in the context of vulnerability scanning?
- A real vulnerability that was missed by the scanner
- A result that incorrectly identifies a vulnerability that does not actually exist (Correct answer)
- A successfully exploited system
- A verified critical finding
Correct answer: A result that incorrectly identifies a vulnerability that does not actually exist
A false positive is when a scanner reports a vulnerability that does not actually exist, requiring manual verification to confirm findings.
Question 6: Which type of report section documents the specific vulnerabilities found, their severity, and remediation steps?
- Executive Summary
- Technical Findings (Correct answer)
- Scope and Rules of Engagement
- Non-Disclosure Agreement
Correct answer: Technical Findings
The Technical Findings section of a pentest report details each vulnerability, its CVSS score, proof of exploitation, and recommended fixes.
eJPT eJPT Exam Fundamentals and Penetration Testing Methodology 2
Which tool is most commonly used in eJPT labs to test connectivity and basic network reachability?