eJPT Trivia 5 — Questions and Answers
Question 1: Which Nmap flag is used to perform a version detection scan on discovered open ports?
- -O
- -sV (Correct answer)
- -A
- -p
Correct answer: -sV
The -sV flag enables service/version detection, probing open ports to identify the running service and its version.
Question 2: What is the primary function of Netcat (nc) in penetration testing?
- Scan for open ports only
- Read and write data across network connections for various purposes (Correct answer)
- Crack password hashes
- Analyze packet captures
Correct answer: Read and write data across network connections for various purposes
Netcat is a versatile networking tool used for port scanning, banner grabbing, file transfer, and creating bind/reverse shells.
Question 3: In web application testing, what does XSS stand for?
- Cross-Site Scripting (Correct answer)
- Cross-Server Session
- External Script Submission
- Extended Security Standard
Correct answer: Cross-Site Scripting
XSS (Cross-Site Scripting) is a vulnerability where attackers inject malicious scripts into web pages viewed by other users.
Question 4: Which command would you use in msfconsole to display all options required for a selected module?
- show info
- list options
- show options (Correct answer)
- display config
Correct answer: show options
'show options' in msfconsole displays all configurable parameters for the currently selected exploit or auxiliary module.
Question 5: What IP address range is defined by RFC 1918 as private and not routable on the public internet?
- 172.16.0.0/8
- 192.168.0.0/8
- 10.0.0.0/8 (Correct answer)
- 127.0.0.0/8
Correct answer: 10.0.0.0/8
10.0.0.0/8 is one of three RFC 1918 private ranges (10.x.x.x), offering the largest block of 16 million addresses.
Question 6: Which post-exploitation Meterpreter command is used to attempt privilege escalation on a Windows target?
- elevate
- getuid
- getsystem (Correct answer)
- escalate
Correct answer: getsystem
'getsystem' attempts multiple techniques to elevate Meterpreter's privileges to SYSTEM level on a Windows host.
Question 7: What does 'ARP' stand for and what is its primary role in networks?
- Address Resolution Protocol — maps IP addresses to MAC addresses (Correct answer)
- Automated Routing Protocol — determines best network routes
- Address Routing Protocol — assigns IP addresses dynamically
- Adaptive Resolution Protocol — resolves DNS conflicts
Correct answer: Address Resolution Protocol — maps IP addresses to MAC addresses
ARP (Address Resolution Protocol) resolves IPv4 addresses to MAC addresses within a local network segment.
eJPT Trivia 5
Which Nmap flag is used to perform a version detection scan on discovered open ports?