eJPT Network Security & Vulnerability 3

Question 1

A tester wants to identify all open UDP ports on a target. Which Nmap flag is used?

Accepted Answer

-sU

Answer

The `-sU` flag triggers a UDP scan; Nmap sends empty UDP packets and interprets ICMP Port Unreachable responses as closed ports and no response as open|filtered.

Question 2

Which of the following BEST describes a 'null session' vulnerability in older Windows systems?

Accepted Answer

Anonymous connection to the IPC$ share allowing enumeration of users and shares

Answer

A null session allows unauthenticated SMB connections to IPC$ in older Windows, enabling enumeration of usernames, shares, and domain information.

Question 3

What information does the 'Banner Grabbing' technique provide during reconnaissance?

Accepted Answer

Service name, version, and sometimes OS information from a network service

Answer

Banner grabbing retrieves the service banner (text sent by a service on connection), which often reveals the service name, version number, and OS details useful for identifying vulnerabilities.

Question 4

During a network scan, Nmap reports a port as 'filtered'. What does this mean?

Accepted Answer

A firewall or filter is blocking probe packets, preventing determination of state

Answer

A filtered port status means Nmap's probes are being blocked by a packet filter or firewall, so Nmap cannot determine if the port is open or closed.

Question 5

Which vulnerability class involves sending more data than a buffer can hold, potentially overwriting adjacent memory?

Accepted Answer

Buffer Overflow

Answer

A buffer overflow occurs when input exceeds the allocated buffer size, overwriting adjacent memory regions and potentially allowing arbitrary code execution.

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

eJPT Network Security & Vulnerability 3