eJPT Information Gathering 3 — Questions and Answers
Question 1: What training is recommended for Information Gathering?
- Structured training combining theory and practical application (Correct answer)
- No training is needed for this topic
- Only reading one blog article is sufficient
- Training is only meant for beginners
Correct answer: Structured training combining theory and practical application
Effective Information Gathering training combines theoretical knowledge with hands-on practical application.
Question 2: How does Information Gathering interact with other eJPT - eLearnSecurity Junior Penetration Tester domains?
- It integrates with and supports other certification domains (Correct answer)
- It operates in complete isolation from other topics
- It conflicts with other certification domains
- Other domains are not relevant to this topic
Correct answer: It integrates with and supports other certification domains
Information Gathering is interconnected with other eJPT - eLearnSecurity Junior Penetration Tester domains creating a comprehensive knowledge framework.
Question 3: What common mistake is made when implementing Information Gathering?
- Skipping proper planning and rushing to implementation (Correct answer)
- Over-planning before taking any action
- Involving too many stakeholders in decisions
- Using too many automation tools at once
Correct answer: Skipping proper planning and rushing to implementation
A common mistake with Information Gathering is rushing implementation without proper planning and assessment.
Question 4: What is the lifecycle of Information Gathering?
- Plan, implement, monitor, review, and improve continuously (Correct answer)
- Implement once and never revisit the topic
- Only plan without ever implementing
- Skip directly to monitoring without planning
Correct answer: Plan, implement, monitor, review, and improve continuously
The Information Gathering lifecycle follows plan-implement-monitor-review-improve in a continuous cycle.
Question 5: What role does automation play in Information Gathering?
- Automating repetitive tasks while maintaining human oversight (Correct answer)
- Replacing all human involvement entirely
- Automation is not applicable to this area
- Only automating documentation-related tasks
Correct answer: Automating repetitive tasks while maintaining human oversight
Automation enhances Information Gathering by handling repetitive tasks while humans maintain strategic oversight.
Question 6: How does Information Gathering address compliance requirements?
- By providing documented controls, audit trails, and measurable outcomes (Correct answer)
- Compliance is not relevant to this particular topic
- By ignoring all regulatory requirements
- By outsourcing all compliance activities externally
Correct answer: By providing documented controls, audit trails, and measurable outcomes
Information Gathering supports compliance through documented controls, measurable outcomes, and clear audit trails.
eJPT Information Gathering 3
What training is recommended for Information Gathering?