eJPT Vulnerability Assessment 2

Question 1

Which Nmap script category is most useful for detecting known vulnerabilities during a vulnerability assessment?

Accepted Answer

vuln

Answer

The 'vuln' script category contains NSE scripts specifically designed to check for known vulnerabilities in services.

Question 2

What does a CVSS score of 9.8 indicate about a vulnerability?

Accepted Answer

Critical severity requiring immediate attention

Answer

A CVSS score of 9.8 falls in the Critical range (9.0–10.0), indicating the vulnerability poses an extreme risk and requires immediate remediation.

Question 3

During a vulnerability scan, you find an open port 445 on a Windows host. Which vulnerability should you prioritize checking for?

Accepted Answer

EternalBlue (MS17-010)

Answer

Port 445 is used by SMB, and EternalBlue (MS17-010) is a critical SMB vulnerability that enables remote code execution on unpatched Windows systems.

Question 4

What is the primary purpose of credentialed scanning versus uncredentialed scanning?

Accepted Answer

Credentialed scans provide deeper visibility into installed software and local configurations

Answer

Credentialed scans authenticate to the target, allowing inspection of installed patches, software versions, and local settings that are invisible from the network.

Question 5

Which tool is commonly used for web application vulnerability scanning during an eJPT-level assessment?

Accepted Answer

Nikto

Answer

Nikto is a web server scanner that checks for dangerous files, outdated software, and common misconfigurations in web applications.

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test

eLearnSecurity Junior Penetration Tester eJPT Practice Practice Test

eJPT Vulnerability Assessment 2