EJPT Study Guide 2026
Everything you need to pass the EJPT exam in one place: the exam format, every topic to study, real practice questions with explanations, flashcards, and full-length practice tests. Free, no sign-up needed.
📋 EJPT Exam Format at a Glance
📚 EJPT Topics to Study (66)
✍️ Sample EJPT Questions & Answers
1. Which Meterpreter command captures screenshots of the victim's desktop?
The `screenshot` command in Meterpreter captures the current state of the victim's desktop and saves it locally for the attacker.
2. In a dictionary attack against a login form, what is the attacker using as input?
A dictionary attack uses a wordlist of likely passwords (common words, phrases, known breached passwords) rather than pure random guessing.
3. During footprinting, a tester uses Google dork `filetype:pdf site:target.com`. What is the goal?
The `filetype:pdf site:target.com` Google dork searches for PDF files indexed by Google that belong to target.com.
4. What is OSINT in the context of penetration testing?
OSINT involves collecting intelligence from publicly available sources such as websites, social media, and public records.
5. A network segment uses the address 10.10.10.0/24. How many usable host IP addresses does this subnet provide?
A /24 subnet has 256 total addresses; subtracting the network address (10.10.10.0) and broadcast address (10.10.10.255) leaves 254 usable host addresses.
6. In Metasploit, what is a 'staged' payload?
A staged payload uses a tiny stager (stage 0) that connects back to the attacker and downloads the larger main payload into memory.