eJPT Host and Network Auditing 4

Question 1

What does ARP scanning reveal during a network audit that ICMP ping sweeps may miss?

Accepted Answer

Hosts that block ICMP but respond to ARP requests on the local subnet

Answer

ARP works at Layer 2 and always gets responses from live hosts on the same subnet, even if they block ICMP.

Question 2

Which tool is specifically designed for banner grabbing to identify service versions?

Accepted Answer

Netcat (nc)

Answer

Netcat can connect to open ports and read the service banner, revealing version information without authentication.

Question 3

During a host audit, you find TCP port 25 open. Which service should you investigate?

Accepted Answer

SMTP (Simple Mail Transfer Protocol)

Answer

TCP port 25 is the default port for SMTP, used for sending email between mail servers.

Question 4

What is the difference between a vulnerability scan and a penetration test?

Accepted Answer

A vulnerability scan identifies weaknesses without exploiting them; a pentest actively exploits vulnerabilities

Answer

Vulnerability scanning identifies and reports potential weaknesses, while penetration testing goes further by attempting to exploit them.

Question 5

Which command would you use with Nmap to run all default NSE scripts against a target?

Accepted Answer

nmap -sC <target>

Answer

The -sC flag runs Nmap's default NSE (Nmap Scripting Engine) scripts against the target.

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test