eJPT eJPT Exam Fundamentals and Penetration Testing Methodology 3

Question 1

What is the purpose of the CVSS score in penetration testing reports?

Accepted Answer

To standardize the severity rating of vulnerabilities on a numeric scale

Answer

CVSS (Common Vulnerability Scoring System) provides a standardized 0–10 numeric score reflecting the severity of a vulnerability.

Question 2

Which environment is the eJPT exam conducted in?

Accepted Answer

A fully hands-on virtual lab with real target machines

Answer

The eJPT exam is a fully practical, hands-on assessment conducted in a virtual lab environment with real targets to attack.

Question 3

In penetration testing methodology, what does 'scope creep' refer to?

Accepted Answer

Testing systems or assets outside the agreed-upon scope

Answer

Scope creep occurs when a tester interacts with systems outside the authorized target list, which is unauthorized and potentially illegal.

Question 4

What is the significance of the /etc/hosts file in eJPT lab exercises?

Accepted Answer

It maps hostnames to IP addresses locally, enabling domain-based lab navigation

Answer

The /etc/hosts file provides local hostname-to-IP resolution, which eJPT labs use so testers can reach targets by hostname.

Question 5

Which statement best describes the concept of 'least privilege' in the context of penetration testing findings?

Accepted Answer

Ensuring users and services have only the minimum permissions needed to perform their function

Answer

Least privilege limits access rights to the minimum necessary, reducing the attack surface and limiting damage from compromised accounts.

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test