eJPT Penetration Testing Tools & Methodologies 5

Question 1

What is the eJPT exam primarily focused on testing?

Accepted Answer

Junior-level practical penetration testing skills including scanning, enumeration, and basic exploitation

Answer

The eJPT certifies foundational hands-on penetration testing skills covering reconnaissance, scanning, exploitation, and reporting.

Question 2

Which tool would you use to perform directory brute-forcing on a web server?

Accepted Answer

Gobuster

Answer

Gobuster performs fast directory and file brute-forcing against web servers using wordlists to discover hidden content.

Question 3

What is the difference between a vulnerability scan and a penetration test?

Accepted Answer

A vulnerability scan identifies potential weaknesses while a penetration test actively exploits them to confirm impact

Answer

Vulnerability scanning identifies and reports potential issues, whereas a penetration test goes further by actually exploiting confirmed vulnerabilities.

Question 4

In the context of web application testing, what is a 'directory traversal' vulnerability?

Accepted Answer

Accessing files outside the web root by manipulating file path inputs with sequences like '../'

Answer

Directory traversal exploits insufficient input validation to navigate the file system beyond the intended web root using '../' sequences.

Question 5

Which Metasploit module type is used for gathering information without exploiting a vulnerability?

Accepted Answer

Auxiliary

Answer

Auxiliary modules perform scanning, fuzzing, sniffing, and service enumeration without exploiting a target.

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

eJPT Penetration Testing Tools & Methodologies 5