eJPT Penetration Testing Tools & Methodologies 3

Question 1

Which phase of a penetration test involves documenting vulnerabilities found and providing remediation guidance?

Accepted Answer

Reporting

Answer

The reporting phase summarizes findings, risk ratings, and actionable remediation steps for the client.

Question 2

What is the primary function of John the Ripper?

Accepted Answer

Password hash cracking

Answer

John the Ripper is a password cracking tool that supports dictionary, brute-force, and rule-based attacks against hashed passwords.

Question 3

In Metasploit, what is a 'payload'?

Accepted Answer

The code executed on the target after exploitation

Answer

A payload is the shellcode or code that runs on the target system after the exploit successfully executes.

Question 4

Which tool is specifically designed for enumerating SMB shares and users on Windows systems?

Accepted Answer

Enum4linux

Answer

Enum4linux is a Linux-based tool that wraps Samba utilities to enumerate SMB shares, users, and policies on Windows/Samba hosts.

Question 5

What does the 'LHOST' option in Metasploit specify?

Accepted Answer

The attacker's IP address where the reverse shell connects back

Answer

LHOST (Local Host) sets the attacker's IP address that the reverse payload will call back to after successful exploitation.

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test