eJPT Vulnerability Scanning 4

Question 1

What information does the '-sV' flag in Nmap provide during a vulnerability assessment?

Accepted Answer

Service name and version running on open ports

Answer

The -sV flag enables version detection, causing Nmap to probe open ports to identify the software name and version running on each service.

Question 2

Which vulnerability database is most commonly referenced by tools like Nessus and OpenVAS when reporting findings?

Accepted Answer

CVE (Common Vulnerabilities and Exposures)

Answer

CVE is the industry-standard dictionary of publicly known vulnerabilities, and scanners use CVE identifiers to reference specific vulnerabilities in their reports.

Question 3

In the context of vulnerability scanning, what is 'network enumeration' typically performed before?

Accepted Answer

Vulnerability scanning itself

Answer

Network enumeration discovers live hosts, open ports, and services before the vulnerability scan, so the scanner knows exactly what targets to assess.

Question 4

Which eJPT-relevant tool is used to perform automated web application vulnerability scanning and can detect issues like SQL injection and XSS?

Accepted Answer

Nikto

Answer

Nikto scans web servers for dangerous files, outdated software versions, and common vulnerabilities including some injection and XSS vectors.

Question 5

What does a vulnerability scan report typically include that helps prioritize remediation efforts?

Accepted Answer

Severity ratings and CVSS scores for each finding

Answer

Vulnerability scan reports assign severity ratings and CVSS scores to each finding, enabling security teams to prioritize patching the highest-risk issues first.

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

eJPT Vulnerability Scanning 4