eJPT Penetration Testing Tools & Methodologies 5 — Questions and Answers
Question 1: What is the eJPT exam primarily focused on testing?
- Advanced exploit development and kernel exploitation
- Junior-level practical penetration testing skills including scanning, enumeration, and basic exploitation (Correct answer)
- Wireless network attacks and RF signal analysis
- Cloud infrastructure security assessment
Correct answer: Junior-level practical penetration testing skills including scanning, enumeration, and basic exploitation
The eJPT certifies foundational hands-on penetration testing skills covering reconnaissance, scanning, exploitation, and reporting.
Question 2: Which tool would you use to perform directory brute-forcing on a web server?
- Wireshark
- Gobuster (Correct answer)
- Nessus
- Metasploit
Correct answer: Gobuster
Gobuster performs fast directory and file brute-forcing against web servers using wordlists to discover hidden content.
Question 3: What is the difference between a vulnerability scan and a penetration test?
- A vulnerability scan exploits vulnerabilities while a pentest only identifies them
- A vulnerability scan identifies potential weaknesses while a penetration test actively exploits them to confirm impact (Correct answer)
- They are identical processes with different names
- A pentest is automated while a vulnerability scan requires manual effort
Correct answer: A vulnerability scan identifies potential weaknesses while a penetration test actively exploits them to confirm impact
Vulnerability scanning identifies and reports potential issues, whereas a penetration test goes further by actually exploiting confirmed vulnerabilities.
Question 4: In the context of web application testing, what is a 'directory traversal' vulnerability?
- Injecting SQL code through URL parameters
- Accessing files outside the web root by manipulating file path inputs with sequences like '../' (Correct answer)
- Cross-site scripting through directory listing pages
- Bypassing authentication using path-based tokens
Correct answer: Accessing files outside the web root by manipulating file path inputs with sequences like '../'
Directory traversal exploits insufficient input validation to navigate the file system beyond the intended web root using '../' sequences.
Question 5: Which Metasploit module type is used for gathering information without exploiting a vulnerability?
- Exploit
- Payload
- Auxiliary (Correct answer)
- Post
Correct answer: Auxiliary
Auxiliary modules perform scanning, fuzzing, sniffing, and service enumeration without exploiting a target.
Question 6: What is the purpose of running 'netstat -an' on a compromised Windows host during post-exploitation?
- List installed software and patches
- View active network connections and listening ports to identify pivot targets (Correct answer)
- Dump password hashes from the SAM database
- Enumerate domain group memberships
Correct answer: View active network connections and listening ports to identify pivot targets
Netstat -an displays all active TCP/UDP connections and listening ports, revealing internal services and potential pivot paths.
Question 7: Which scanning technique involves sending packets with no flags set to evade detection?
- SYN scan (-sS)
- NULL scan (-sN) (Correct answer)
- Connect scan (-sT)
- FIN scan (-sF)
Correct answer: NULL scan (-sN)
A NULL scan sends TCP packets with no flags set; some firewalls and IDS systems do not log flagless packets, aiding evasion.
eJPT Penetration Testing Tools & Methodologies 5
What is the eJPT exam primarily focused on testing?