eJPT eJPT Exam Fundamentals and Penetration Testing Methodology

Question 1

What is the correct order of phases in a standard penetration testing methodology?

Accepted Answer

Reconnaissance → Scanning → Exploitation → Post-Exploitation → Reporting

Answer

Exploitation → Reconnaissance → Reporting → Scanning

Answer

Reporting → Scanning → Exploitation → Reconnaissance

Answer

Exploitation → Scanning → Reconnaissance → Reporting

Question 2

What is the eJPT certification primarily designed to validate?

Accepted Answer

Junior-level practical penetration testing skills

Answer

Advanced exploit development skills

Answer

Malware reverse engineering ability

Answer

Cloud security architecture knowledge

Question 3

What type of engagement is a penetration test where the tester has full knowledge of the target environment, including source code and architecture?

Accepted Answer

White-box testing

Answer

Black-box testing

Answer

Gray-box testing

Answer

Red-team engagement

Question 4

Which document formally authorizes a penetration tester to conduct testing against a client's systems?

Accepted Answer

Rules of Engagement (RoE) / Scope of Work

Answer

Non-Disclosure Agreement (NDA)

Answer

Bug Bounty Terms

Answer

Incident Response Plan

Question 5

In a black-box penetration test, what information is provided to the tester at the start?

Accepted Answer

Only the target IP range or domain

Answer

Full network diagrams and credentials

Answer

Source code of all applications

Answer

All vulnerability scan results

Question 6

What is the main goal of a penetration test compared to a vulnerability assessment?

Accepted Answer

Actively exploit vulnerabilities to demonstrate real-world impact

Answer

List vulnerabilities without exploitation

Answer

Only review policies and procedures

Answer

Install security patches on systems