Trivia Flashcards
7 cards from real EJPT practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Trivia flashcards as text
Which Nmap flag is used to perform a version detection scan on discovered open ports?
Answer: -sV
The -sV flag enables service/version detection, probing open ports to identify the running service and its version.
What is the primary function of Netcat (nc) in penetration testing?
Answer: Read and write data across network connections for various purposes
Netcat is a versatile networking tool used for port scanning, banner grabbing, file transfer, and creating bind/reverse shells.
In web application testing, what does XSS stand for?
Answer: Cross-Site Scripting
XSS (Cross-Site Scripting) is a vulnerability where attackers inject malicious scripts into web pages viewed by other users.
Which command would you use in msfconsole to display all options required for a selected module?
Answer: show options
'show options' in msfconsole displays all configurable parameters for the currently selected exploit or auxiliary module.
What IP address range is defined by RFC 1918 as private and not routable on the public internet?
Answer: 10.0.0.0/8
10.0.0.0/8 is one of three RFC 1918 private ranges (10.x.x.x), offering the largest block of 16 million addresses.
Which post-exploitation Meterpreter command is used to attempt privilege escalation on a Windows target?
Answer: getsystem
'getsystem' attempts multiple techniques to elevate Meterpreter's privileges to SYSTEM level on a Windows host.
What does 'ARP' stand for and what is its primary role in networks?
Answer: Address Resolution Protocol — maps IP addresses to MAC addresses
ARP (Address Resolution Protocol) resolves IPv4 addresses to MAC addresses within a local network segment.