eJPT Trivia 4

Question 1

Which tool is commonly used in eJPT labs to perform dictionary-based password attacks against web login forms?

Accepted Answer

Hydra

Answer

Hydra is a fast network login cracker that supports brute-forcing HTTP form logins and many other protocols.

Question 2

What is the purpose of the 'LHOST' parameter when configuring a Metasploit reverse shell payload?

Accepted Answer

The listening IP address of the attacker's machine

Answer

LHOST specifies the attacker's IP address that the reverse shell will connect back to after execution.

Question 3

Which command-line tool can be used to transfer files on Linux using HTTP, FTP, or other protocols?

Accepted Answer

wget

Answer

wget is a non-interactive download utility that retrieves files from web and FTP servers via command line.

Question 4

In penetration testing methodology, what phase comes directly after reconnaissance?

Accepted Answer

Scanning and Enumeration

Answer

After reconnaissance, the scanning and enumeration phase identifies open ports, services, and vulnerabilities on targets.

Question 5

What type of SQL injection does NOT require the application to display query results back to the attacker?

Accepted Answer

Blind SQL injection

Answer

Blind SQL injection infers data through true/false conditions or time delays without visible output from the database.

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test