eJPT eJPT Exam Fundamentals and Penetration Testing Methodology 3

Question 1

What is the purpose of the CVSS score in penetration testing reports?

Accepted Answer

To standardize the severity rating of vulnerabilities on a numeric scale

Answer

To count the number of vulnerabilities found

Answer

To measure network bandwidth

Answer

To identify the name of the exploit used

Question 2

Which environment is the eJPT exam conducted in?

Accepted Answer

A fully hands-on virtual lab with real target machines

Answer

A written multiple-choice test only

Answer

An oral examination

Answer

A take-home essay assignment

Question 3

In penetration testing methodology, what does 'scope creep' refer to?

Accepted Answer

Testing systems or assets outside the agreed-upon scope

Answer

Finding more vulnerabilities than expected

Answer

A slow network scan technique

Answer

Privilege escalation on a single host

Question 4

What is the significance of the /etc/hosts file in eJPT lab exercises?

Accepted Answer

It maps hostnames to IP addresses locally, enabling domain-based lab navigation

Answer

It stores user passwords on Linux

Answer

It configures firewall rules

Answer

It logs all network connections

Question 5

Which statement best describes the concept of 'least privilege' in the context of penetration testing findings?

Accepted Answer

Ensuring users and services have only the minimum permissions needed to perform their function

Answer

Giving users as many privileges as possible for productivity

Answer

Removing all user accounts from a system

Answer

Granting admin rights to the penetration tester

Question 6

When writing up eJPT exam findings, what must be included to prove a vulnerability was successfully exploited?

Accepted Answer

Proof of concept (PoC) screenshots or command output showing successful exploitation

Answer

Only the CVE number

Answer

The vendor's patch notes

Answer

A theoretical explanation with no evidence