eJPT Vulnerability Scanning 5

Question 1

Which of the following best describes a 'zero-day' vulnerability in the context of vulnerability scanning?

Accepted Answer

A vulnerability unknown to the vendor with no available patch

Answer

A zero-day vulnerability is one that is unknown to the software vendor or has no patch available, making it particularly dangerous.

Question 2

What is the main advantage of using Masscan over Nmap for initial reconnaissance in a large network assessment?

Accepted Answer

Masscan is capable of scanning the entire internet in minutes due to its asynchronous design

Answer

Masscan uses an asynchronous, stateless design that allows it to send millions of packets per second, making it significantly faster than Nmap for large-scale port scanning.

Question 3

During a vulnerability scan, you discover an SMB service running on port 445. Which well-known vulnerability should you specifically check for on unpatched Windows systems?

Accepted Answer

EternalBlue (MS17-010)

Answer

EternalBlue (MS17-010) is a critical SMB vulnerability exploited by WannaCry and NotPetya, and is a standard check when SMB is discovered on unpatched Windows hosts.

Question 4

What does the term 'attack surface' mean in the context of vulnerability scanning?

Accepted Answer

All the possible points where an attacker could try to enter or extract data from a system

Answer

The attack surface encompasses all entry points and exposed interfaces — open ports, services, APIs, and user inputs — that an attacker could potentially exploit.

Question 5

Which scan type in Nmap is used specifically to scan UDP ports?

Accepted Answer

-sU

Answer

The -sU flag tells Nmap to perform a UDP scan, which is important for discovering services like DNS, SNMP, and DHCP that run over UDP.

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

(eJPT) eLearnSecurity Junior Penetration Tester Certification Practice Test

eJPT Vulnerability Scanning 5