eJPT Host and Network Auditing 5

Question 1

What does 'passive reconnaissance' mean in the context of host and network auditing?

Accepted Answer

Gathering information without directly interacting with the target systems

Answer

Passive reconnaissance collects information from public sources (OSINT) without sending packets to the target.

Question 2

Which file on a Linux system contains a list of hostname-to-IP mappings that are checked before DNS?

Accepted Answer

/etc/hosts

Answer

/etc/hosts is a local file that maps hostnames to IP addresses and takes precedence over DNS resolution.

Question 3

During a network audit, what does the term 'pivot' refer to?

Accepted Answer

Using a compromised host to gain access to other network segments not directly reachable

Answer

Pivoting uses a compromised host as a relay point to reach and attack systems in other network segments.

Question 4

What Nmap command combines OS detection, version scanning, script scanning, and traceroute?

Accepted Answer

nmap -A <target>

Answer

The -A flag enables aggressive mode, combining -O, -sV, -sC, and --traceroute in a single scan.

Question 5

Which port is associated with the HTTPS service during a web server audit?

Accepted Answer

443

Answer

TCP port 443 is the standard port for HTTPS (HTTP over TLS/SSL) encrypted web traffic.

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test