eJPT Trivia 4 — Questions and Answers
Question 1: Which tool is commonly used in eJPT labs to perform dictionary-based password attacks against web login forms?
- Nmap
- Hydra (Correct answer)
- Wireshark
- Netcat
Correct answer: Hydra
Hydra is a fast network login cracker that supports brute-forcing HTTP form logins and many other protocols.
Question 2: What is the purpose of the 'LHOST' parameter when configuring a Metasploit reverse shell payload?
- The target host's IP address
- The listening IP address of the attacker's machine (Correct answer)
- The local hostname of the target
- The port to connect back to
Correct answer: The listening IP address of the attacker's machine
LHOST specifies the attacker's IP address that the reverse shell will connect back to after execution.
Question 3: Which command-line tool can be used to transfer files on Linux using HTTP, FTP, or other protocols?
- scp
- rsync
- wget (Correct answer)
- nc
Correct answer: wget
wget is a non-interactive download utility that retrieves files from web and FTP servers via command line.
Question 4: In penetration testing methodology, what phase comes directly after reconnaissance?
- Exploitation
- Reporting
- Scanning and Enumeration (Correct answer)
- Post-Exploitation
Correct answer: Scanning and Enumeration
After reconnaissance, the scanning and enumeration phase identifies open ports, services, and vulnerabilities on targets.
Question 5: What type of SQL injection does NOT require the application to display query results back to the attacker?
- UNION-based injection
- Error-based injection
- Blind SQL injection (Correct answer)
- In-band injection
Correct answer: Blind SQL injection
Blind SQL injection infers data through true/false conditions or time delays without visible output from the database.
Question 6: Which Wireshark filter would display only HTTP traffic?
- port 80
- tcp.port == 80
- http (Correct answer)
- protocol == http
Correct answer: http
The 'http' display filter in Wireshark shows all packets using the HTTP application protocol.
Question 7: What is the eJPT certification issued by?
- Offensive Security
- EC-Council
- eLearnSecurity (now INE Security) (Correct answer)
- SANS Institute
Correct answer: eLearnSecurity (now INE Security)
The eJPT is issued by eLearnSecurity, which is now part of INE Security, as an entry-level pentesting certification.
eJPT Trivia 4
Which tool is commonly used in eJPT labs to perform dictionary-based password attacks against web login forms?