eLearnSecurity Junior Penetration Tester (eJPT) Class Practice Exam

These questions are part of the practice quiz. Start practicing

• Which port number is mapped to POP3 according to the material?
• Which statement about session cookies is true?
• What is the topmost layer in the OSI model?
• NetBIOS port set used?
• Which header is used to instruct the browser to install a cookie?
• The range 0.0.0.0 - 0.255.255.255 represents this network.
• In a packet-filtering firewall, which rule causes the packet to be dropped without diagnostic message?
• What is a session in web apps?
• Packets can be transmitted over which media?
• What is the primary purpose of an Intrusion Detection System (IDS)?
• Define credential cracking and two common methods.
• What encapsulation means in networking?
• Which Linux command shows listening ports and current TCP connections?
• Hubs and switches are network devices that forward frames on a local network and operate at which layer?
• Which port number is mapped to IMAP according to the material?
• Not a typical injection payload type?
• Which statement about IP is true?
• Which term refers to textual information installed by a website in the browser's cookie jar?
• What does HTTP status code 301 Moved Permanently indicate?
• Which statement best describes an application layer firewall?
• Which port does Microsoft SQL Server listen on by default?
• What is a CAM table in a switch?
• Credential stuffing involves what?
• Which languages are commonly interpreted?
• What is the initial section of an HTTP message called?
• The range 192.168.0.0 - 192.168.255.255 is reserved for private networks.
• What is XSS and how can it be detected in a pentest?
• Which tool is known for its intercepting proxy feature used in web application testing?
• Which set of layers makes up the TCP/IP stack?
• Which item is NOT among the common defaults or misconfigurations attackers look for?
• Typical enumeration targets on Windows vs Linux.
• Which Windows command shows listening ports and current TCP connections?
• Two techniques used to provide access to a network from another network are
• With an IP/netmask pair you can identify the network part and the host part of an IP address.
• Which misconfiguration involves allowing visitors to view directory contents when no index page exists?
• What role does DNS play in recon and how can it be abused?
• Which device primarily forwards frames within a LAN using MAC addresses?
• Which sequence correctly represents the typical penetration testing workflow?
• What is the purpose of a firewall in a network, and how might it affect testing?
• The range 127.0.0.0 - 127.255.255.255 represents the local host.
• What is the purpose of a CSRF token?
• Differentiate SQL injection and NoSQL injection and give a risk example for each.
• Which statement best describes the relevance of TLS and SSH for pentesting?
• What is the role of Metasploit in introductory pentest practice?
• What does HTTP status code 302 Found indicate?
• Which statement about Burp Suite is true?
• What does HTTP status code 500 Internal Server Error indicate?
• Which statement about compilers is true?
• Which port is used by SMTP (Simple Mail Transfer Protocol)?
• What is the primary function of a packet-filtering firewall?
• In firewall terminology, which action notifies the source when blocking a packet?
• Which set of layers corresponds to the OSI reference model's top seven layers?
• Which protocol is used to learn the MAC address corresponding to an IP address?
• HTTPS is HTTP delivered over which cryptographic protocol?
• SFTP port? (Simple File Transfer Protocol) uses which port?
• Which statement describes the role of the netmask?
• Can the DNS system perform reverse lookups to convert an IP address to a domain name?
• Why is practicing in a controlled lab environment valuable for eJPT preparation?
• What is input validation and why is it critical for security?
• What practice helps ensure evidentiary integrity when using multiple tools during a test?
• NetBIOS commonly uses which ports?
• Which pair are programming languages?
• In the OSI model, which layer would an email client primarily operate at?
• Burp Suite's Repeater is used for what purpose?
• What is service version detection and why is it important?
• Which layer is responsible for transporting data between processes (server and client programs)?
• Which set lists the primary phases of the eJPT penetration testing methodology?
• Which is an example of a compiled language pair?
• Which of the following are essential reasons for legal and ethical considerations in penetration testing?
• ARP is used to bind which addressing schemes?
• Where are IDS sensors commonly placed to monitor traffic?
• Which statement best describes the DNS resolution algorithm order?
• Which of the following best describes the role of Burp Suite in injection testing?
• Which of the following is used to determine the best path to reach a network?
• HTTP is which kind of protocol?
• Name two common port-scanning tools and a basic difference between them.
• What is credential reuse and why is it risky?
• Which payload types are commonly used to test injection flaws?
• When the server receives an HTTP request, what does it do?
• What is CVSS and how is it used in reports?
• What is the purpose of the default route 0.0.0.0 in routing tables?
• To convert a DNS name into an IP address, which component performs the DNS resolution?
• Which does the Host header field specify?
• Which Windows command shows detailed MAC address information?
• Which statement best contrasts CSRF and XSS?
• What are the two components of the packet structure?
• In TCP or UDP communications, which fields specify the port numbers?
• Which statement about the HTTP status code 200 OK is true?
• How many protocol layers are listed under Protocol layers in the material?
• Which statement about interpreters is true?
• Which option describes the role of a proxy in web security testing?
• During which phase are vulnerabilities identified and validated before exploitation?
• On Linux, which command can be used to view the neighboring hardware address table (ARP cache)?
• In Linux privilege escalation testing, why are SUID binaries commonly checked?
• What is the critical point of web application security described by the Same Origin Policy?
• Which statement about IPS is true?
• Electrical signals are interpreted as what in a network?
• Give an example of a Linux privilege escalation vector commonly checked during pentests.
• Which statement best captures the primary distinction between authenticated and unauthenticated scanning?
• What does the Secure flag on a cookie do?
• Which Windows command shows the ARP cache?
• What is the purpose of scope and rules of engagement in a pentest?
• What is SQL injection and why is it important for web app testing?
• CSRF vs XSS difference?
• What is CSRF token and its purpose?
• Which misconfiguration refers to weak TLS settings on HTTPS?
• In IP terminology, IP packets are commonly called what?
• IP:Port pair is used to identify a single network process on a machine. Which component forms the IP:Port pair?
• Which statement best distinguishes SQL injection from NoSQL injection?
• Which port is used by RDP by default?
• Which statement best describes a session ID?
• Why is clearly defined scope important in a penetration test?
• Which statement describes the effect of the Secure flag on cookies?
• Which of the following is a typical post-exploitation task?
• Which port does MySQL listen on by default?
• Which of the following is a direct example of data collection during post-exploitation?
• In the DNS name www.elearnsecurity.com, which part is the domain part?
• What is TCP/IP?
• Which sequence demonstrates how a session cookie is installed?
• Which is a best practice for logging and evidence collection during a pentest?
• Which description best defines an intercepting proxy's role in testing?
• Which port number is used by HTTP (Hypertext Transfer Protocol)?
• In promiscuous mode, which statement best describes the NIC's behavior?
• What is OS fingerprinting and what does it help you determine?
• What is NAT used for in network design?
• Which operation does a router perform to decide where to forward a packet?
• In the cookie protocol, when is a Set-Cookie header typically sent?
• Which statement best describes reflected XSS vs stored XSS?
• Which statement correctly distinguishes passive from active reconnaissance?
• Which activity best helps tailor exploitation by determining the operating system and version?
• Which header fields participate in the TCP three-way handshake?
• Which statement best describes the relationship between a script and the environment that runs it?
• What is the difference between a vulnerability scan and a penetration test?
• What is the primary goal of networking?
• To determine if JS can access a resource, which attributes must match?
• Which statement is true about programming languages?
• SMB enumeration and why is it important?
• Explain the relevance of the OWASP Top 10 to eJPT.
• What is a typical outcome of enumeration?
• Which port is used by FTP by default?
• Which statement is true about port 22 (SSH) in pentesting?
• What is the purpose of a tamper-evident chain of custody in a pentest?
• What is the storage space where a web browser stores the cookies?
• What is post-exploitation in pentesting?
• Which port is used by SSH (Secure Shell)?
• DNS is best described as
• What is the primary capability of Burp Suite's proxy?
• What is the purpose of the header in a packet?
• What are packets primarily made of in transmission?
• Which statement differentiates a vulnerability from a misconfiguration?
• Telnet port?
• Which layer is responsible for identifying hosts?
• In www.elearnsecurity.com, which part is the domain name (second-level domain)?
• What is a zero-day vulnerability and can you test for it?
• Which statement describes scripting languages?
• Which command would you use to view listening ports and current TCP connections on Linux?
• Port 22 is commonly used for which protocol, and why is it important in pentests?
• What is the first line of an HTTP response message called?
• A firewall can obscure hosts and complicate enumeration during testing. Which statement best reflects this?
• What does HTTP status code 403 Forbidden indicate?
• Which command would you use on Windows to view listening ports and current TCP connections?
• Which port number is used by HTTPS (Hypertext Transfer Protocol Secure)?
• Which port number is mapped to HTTP according to the material?
• Which statement describes symmetric and asymmetric encryption and their relevance to pentesting?
• Which server is contacted first during DNS resolution?
• Session IDs can also be transmitted via GET requests
• Name common authentication weaknesses found during tests.
• To find the network part you have to perform which operation between netmask and IP?
• How does a web application install session IDs on a browser?
• Post-exploitation phase tasks.
• Explain the concept of pivoting in post-exploitation.
• IDS detects risky traffic by means of
• Which header tells the server what client software is issuing the request?
• What is the primary function of a router in a network?
• What is a common risk of misconfigured cloud storage?
• Which statement best describes IDS signatures?
• How can misconfigurations in cloud storage be discovered and why are they risky?
• POP3 port? (Post Office Protocol version 3) uses which port?
• Define enumeration in the context of penetration testing.
• In the cookie protocol, what happens after receiving a Set-Cookie header?
• Which layer uses the physical media to send packets?
• If a switch does not have a MAC address entry in its CAM table, it will...
• What does HTTP status code 404 Not Found indicate?
• What describes an intercepting proxy?
• Which Burp Suite action best describes Repeater's function?
• What is the primary purpose of port scanning in a penetration test?
• How many octets are in an IPv4 address?
• Burp Suite's Intruder is used for what purpose?
• Why is documenting findings and risk ratings essential in a pentest report?
• What is a common sign of weak TLS configuration in a web app?
• What is session management and why is it important in web apps?
• What is Wireshark primarily used for?
• TTL in networking stands for what?
• To fully identify a host you need which?
• Encapsulation results in the payload being wrapped with headers at multiple layers. True or False?
• Which sequence best describes identifying injection flaws in a web application using Burp Suite?
• Which of the following could be payload data in a packet?
• What is 'safe harbor' in the context of a penetration test?
• What does the payload of a packet represent?
• IMAP port number? (Internet Message Access Protocol) uses which port?
• Which statement describes IPS threat mitigation?
• Which statement best defines authorization in a penetration test?
• What does IP do in a communication?
• What is a daemon in a computer system?
• Which statement best describes authenticated scanning?