eJPT eJPT Exam Fundamentals and Penetration Testing Methodology 2

Question 1

Which tool is most commonly used in eJPT labs to test connectivity and basic network reachability?

Accepted Answer

ping

Answer

The ping command sends ICMP echo requests to verify that a target host is reachable over the network.

Question 2

What does the term 'attack surface' refer to in penetration testing?

Accepted Answer

All possible entry points an attacker could use to compromise a system

Answer

The attack surface encompasses all exposed points — open ports, services, interfaces, and input vectors — that an attacker could exploit.

Question 3

During an eJPT exam, which notation is used to describe an IP address with its subnet mask in CIDR format?

Accepted Answer

192.168.1.1/24

Answer

CIDR (Classless Inter-Domain Routing) notation combines the IP address and prefix length with a slash, e.g., 192.168.1.1/24.

Question 4

What is the recommended first step when you gain access to a new network segment during an eJPT lab?

Accepted Answer

Enumerate the new segment by scanning for live hosts and services

Answer

When pivoting to a new network segment, enumeration of live hosts and services helps build a complete picture before exploitation.

Question 5

What is a 'false positive' in the context of vulnerability scanning?

Accepted Answer

A result that incorrectly identifies a vulnerability that does not actually exist

Answer

A false positive is when a scanner reports a vulnerability that does not actually exist, requiring manual verification to confirm findings.

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test