eJPT Network Security & Vulnerability 4

Question 1

Which network protocol is exploited in a 'Smurf attack'?

Accepted Answer

ICMP with broadcast amplification

Answer

A Smurf attack sends ICMP Echo Requests spoofed with the victim's IP to a broadcast address, causing all hosts on the network to reply to the victim, overwhelming it.

Question 2

When using Wireshark to analyze a capture, a tester filters with 'tcp.flags.syn == 1 && tcp.flags.ack == 0'. What traffic is displayed?

Accepted Answer

Initial TCP SYN packets (connection initiation attempts)

Answer

This Wireshark filter isolates TCP packets that have the SYN flag set but not the ACK flag, which are the initial connection-request packets in the TCP handshake.

Question 3

What is the primary security risk of using TELNET for remote administration?

Accepted Answer

It transmits all data including credentials in plaintext

Answer

Telnet transmits all data — including usernames and passwords — in cleartext, making it trivial for an attacker with network access to capture credentials via sniffing.

Question 4

A network segment uses the address 10.10.10.0/24. How many usable host IP addresses does this subnet provide?

Accepted Answer

254

Answer

A /24 subnet has 256 total addresses; subtracting the network address (10.10.10.0) and broadcast address (10.10.10.255) leaves 254 usable host addresses.

Question 5

Which Metasploit command is used to search for modules related to a specific vulnerability or service?

Accepted Answer

search

Answer

The `search` command in msfconsole allows users to find modules by keyword, CVE number, platform, or module type across the entire Metasploit framework database.

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

eJPT Network Security & Vulnerability 4