eJPT Trivia 3

Question 1

Which Nmap script category is used to run scripts that check for known vulnerabilities?

Accepted Answer

vuln

Answer

The 'vuln' NSE category runs scripts that check for specific known vulnerabilities on target services.

Question 2

What is the default port for HTTPS (HTTP Secure) traffic?

Accepted Answer

443

Answer

HTTPS uses TCP port 443 by default, encrypting HTTP traffic with TLS/SSL.

Question 3

In the context of eJPT, what does 'pivoting' mean during a penetration test?

Accepted Answer

Using a compromised host to attack other internal systems

Answer

Pivoting uses a compromised machine as a relay to reach and attack systems in otherwise inaccessible network segments.

Question 4

Which file on a Windows system contains the local user account password hashes?

Accepted Answer

SAM

Answer

The SAM (Security Account Manager) database stores local user password hashes on Windows systems.

Question 5

What is the purpose of running 'whoami' after gaining a shell during a penetration test?

Accepted Answer

Identify the current user context and privileges

Answer

The 'whoami' command reveals the current user account running the shell, helping assess privilege level.

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test