eJPT Scanning and Enumeration 4

Question 1

Which Nmap flag enables the use of decoy addresses to obscure the true source of a scan?

Accepted Answer

-D

Answer

The '-D <decoy1,decoy2,...,ME>' option makes the scan appear to originate from multiple IP addresses, hiding the real source.

Question 2

When enumerating a web application, what does directory brute-forcing with Gobuster primarily accomplish?

Accepted Answer

Discovers hidden or unlisted directories and files on a web server

Answer

Gobuster systematically requests paths from a wordlist to find directories and files the server doesn't publicly link to.

Question 3

What is the significance of TCP port 3389 discovered open on a target?

Accepted Answer

Windows Remote Desktop Protocol (RDP)

Answer

Port 3389 is the default port for Microsoft's Remote Desktop Protocol (RDP), allowing GUI-based remote access to Windows hosts.

Question 4

Which scanning technique is used to bypass simple stateless firewalls by sending a TCP packet with only the FIN flag set?

Accepted Answer

FIN scan

Answer

A FIN scan sends packets with only the FIN flag, which some stateless firewalls pass because they don't match a SYN rule, while closed ports respond with RST.

Question 5

What information can 'nbtscan' retrieve from a Windows host on a local network?

Accepted Answer

NetBIOS names, MAC addresses, and workgroup/domain names

Answer

nbtscan sends NetBIOS Name Service queries to retrieve computer names, logged-in users, and workgroup/domain membership.

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test

eJPT Scanning and Enumeration 4