eJPT Scanning and Enumeration 3

Question 1

Which command performs a DNS zone transfer against the domain example.com using the dig utility?

Accepted Answer

dig axfr example.com @ns1.example.com

Answer

The 'axfr' query type requests a full zone transfer from the specified nameserver, replicating all DNS records.

Question 2

What is the default port for SNMP?

Accepted Answer

UDP 161

Answer

SNMP agents listen on UDP port 161 for queries; UDP 162 is used for SNMP trap messages.

Question 3

Which Nmap option outputs scan results in all formats simultaneously (normal, XML, and grepable)?

Accepted Answer

-oA

Answer

'-oA <basename>' saves results in all three formats: .nmap (normal), .xml, and .gnmap (grepable).

Question 4

During enumeration you run 'netdiscover -r 192.168.1.0/24'. What is this tool primarily used for?

Accepted Answer

ARP-based host discovery on a local network

Answer

netdiscover uses ARP requests to discover live hosts on a local subnet, making it effective for internal network reconnaissance.

Question 5

Which SNMP community string is typically configured by default on many network devices?

Accepted Answer

public

Answer

The default read-only SNMP community string on most devices is 'public', which should be changed during hardening.

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test