eJPT - eLearnSecurity Junior Penetration Tester Vulnerability Assessment Questions and Answers

Question 1

A penetration tester is conducting a vulnerability assessment and wants to simulate the perspective of an external attacker with no prior knowledge of the internal network.
Which type of scan would be MOST appropriate for this objective?

Accepted Answer

Unauthenticated scan

Answer

Authenticated scan

Answer

Passive scan

Answer

Credentialed scan

Question 2

During a vulnerability assessment, a junior penetration tester uses a tool that actively sends specially crafted packets to target systems to elicit responses and identify potential weaknesses. This method, however, risks disrupting network operations. Which vulnerability scanning technique is being used?

Accepted Answer

Active scanning

Answer

Passive scanning

Answer

Credentialed scanning

Answer

Compliance scanning

Question 3

Which of the following is the PRIMARY purpose of the Common Vulnerability Scoring System (CVSS)?

Accepted Answer

To offer a standardized framework for rating the severity of vulnerabilities.

Answer

To provide a unique identifier for each vulnerability discovered.

Answer

To automatically patch and remediate identified system weaknesses.

Answer

To catalog exploits and proof-of-concept code for vulnerabilities.

Question 4

A penetration tester needs to perform a vulnerability scan that provides the most comprehensive and accurate view of a system's security posture by looking at its configuration, patch levels, and installed software from an 'insider' perspective. Which scanning method should be chosen?

Accepted Answer

Authenticated scan

Answer

Passive scan

Answer

Unauthenticated scan

Answer

Black-box scan

Question 5

While Nmap is primarily known as a network port scanner, its capabilities can be extended to perform vulnerability assessments using which of its features?

Accepted Answer

The Nmap Scripting Engine (NSE)

Answer

The Nmap Version Detection Engine (-sV)

Answer

The Nmap OS Detection Engine (-O)

Answer

The Nmap Timing Templates (-T)

Question 6

A security analyst is comparing vulnerability assessment tools. One tool, Nessus, is primarily known as a dedicated vulnerability scanner. Another tool, Nmap, is primarily a network discovery and port scanner. What is a key advantage of using a dedicated scanner like Nessus over Nmap for vulnerability assessment?

Accepted Answer

Nessus provides more comprehensive and detailed vulnerability reports with remediation suggestions.

Answer

Nessus is open-source, whereas Nmap is a commercial product.

Answer

Nmap is incapable of identifying service versions on open ports.

Answer

Nessus scans are always passive and never impact network performance.