eJPT Planning and Scoping 3

Question 1

Which of the following BEST describes a 'white-box' penetration test?

Accepted Answer

Testing where the tester receives full information including network diagrams, source code, and credentials

Answer

White-box testing provides the tester with full knowledge of the environment, enabling thorough coverage and efficient testing.

Question 2

What is the main reason penetration testers establish a communication plan before starting an engagement?

Accepted Answer

To ensure the tester can reach key personnel if critical vulnerabilities are found or if testing causes unintended disruption

Answer

A communication plan ensures that critical findings, incidents, or unexpected events can be escalated quickly to the right stakeholders.

Question 3

During planning, a client specifies that testing must occur only between 2 AM and 5 AM on weekdays. What is this type of restriction called?

Accepted Answer

Testing window or maintenance window constraint

Answer

Testing windows define the specific time periods during which active testing is authorized to minimize business disruption.

Question 4

A tester performing reconnaissance discovers the target company uses a cloud provider not mentioned in the scope document. What is the correct action?

Accepted Answer

Halt cloud testing and contact the client to clarify whether cloud assets are in scope

Answer

Any assets not explicitly listed in the scope require client clarification and additional authorization before testing.

Question 5

What is the eJPT exam's primary focus when it comes to penetration testing methodology?

Accepted Answer

Foundational penetration testing skills including reconnaissance, scanning, exploitation, and reporting

Answer

The eJPT certification validates foundational penetration testing skills across the complete testing lifecycle.

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

eJPT Planning and Scoping 3