eJPT Penetration Testing Tools & Methodologies 2

Question 1

Which Metasploit command searches for modules related to a specific vulnerability or service?

Accepted Answer

search

Answer

The 'search' command in msfconsole lets you find modules by keyword, CVE, or platform.

Question 2

What does the Nmap flag '-sU' perform?

Accepted Answer

UDP scan

Answer

The '-sU' flag instructs Nmap to perform a UDP port scan instead of the default TCP scan.

Question 3

In a penetration test, what is 'pivoting'?

Accepted Answer

Using a compromised host to attack other internal systems

Answer

Pivoting uses a compromised machine as a relay to reach and attack other network segments not directly accessible.

Question 4

Which tool is commonly used for capturing and analyzing network packets during a penetration test?

Accepted Answer

Wireshark

Answer

Wireshark is a network protocol analyzer used to capture and inspect packets in real time.

Question 5

What is the purpose of a 'bind shell' in post-exploitation?

Accepted Answer

The target machine opens a listener and the attacker connects to it

Answer

A bind shell opens a listening port on the target, allowing the attacker to connect inbound to gain shell access.

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test