eJPT Trivia 3 — Questions and Answers
Question 1: Which Nmap script category is used to run scripts that check for known vulnerabilities?
- safe
- discovery
- vuln (Correct answer)
- exploit
Correct answer: vuln
The 'vuln' NSE category runs scripts that check for specific known vulnerabilities on target services.
Question 2: What is the default port for HTTPS (HTTP Secure) traffic?
- 80
- 8080
- 443 (Correct answer)
- 8443
Correct answer: 443
HTTPS uses TCP port 443 by default, encrypting HTTP traffic with TLS/SSL.
Question 3: In the context of eJPT, what does 'pivoting' mean during a penetration test?
- Changing attack tools mid-engagement
- Using a compromised host to attack other internal systems (Correct answer)
- Rotating between user accounts
- Switching from TCP to UDP attacks
Correct answer: Using a compromised host to attack other internal systems
Pivoting uses a compromised machine as a relay to reach and attack systems in otherwise inaccessible network segments.
Question 4: Which file on a Windows system contains the local user account password hashes?
- SYSTEM
- SAM (Correct answer)
- NTDS.dit
- SECURITY
Correct answer: SAM
The SAM (Security Account Manager) database stores local user password hashes on Windows systems.
Question 5: What is the purpose of running 'whoami' after gaining a shell during a penetration test?
- Check network connectivity
- Identify the current user context and privileges (Correct answer)
- List running processes
- Display the hostname
Correct answer: Identify the current user context and privileges
The 'whoami' command reveals the current user account running the shell, helping assess privilege level.
Question 6: Which HTTP method is most commonly associated with submitting form data that could be vulnerable to SQL injection?
- GET
- POST (Correct answer)
- PUT
- DELETE
Correct answer: POST
POST requests commonly carry form data in the request body, which is a frequent injection point for SQL attacks.
Question 7: What does 'TTL' stand for in the context of network packets?
- Transmission Transfer Layer
- Time To Live (Correct answer)
- Total Traffic Load
- TCP Timeout Limit
Correct answer: Time To Live
TTL (Time To Live) is a field in IP packets that limits their lifespan by decrementing at each router hop.
eJPT Trivia 3
Which Nmap script category is used to run scripts that check for known vulnerabilities?