eLearnSecurity Junior Penetration Tester (eJPT) Practice Test
Gana confianza para eLearnSecurity Junior Penetration Tester (eJPT). Practica los conceptos, comprende las respuestas y refuerza tus conocimientos pregunta a pregunta.
Probar una preguntaDescripción y detalles del examen
The eLearnSecurity Junior Penetration Tester (eJPT) certification is a foundational, performance-based credential designed to validate the essential skills required for entry-level penetration testing roles. Administered by INE Security, this certification focuses on practical, hands-on abilities rather than theoretical knowledge alone. Candidates demonstrate proficiency in conducting a complete penetration test, from initial reconnaissance and information gathering to exploitation, post-exploitation, and professional report writing. The exam simulates a real-world network environment, requiring test-takers to apply methodologies learned in the associated PTS (Penetration Testing Student) training path. The eJPT is widely recognized as an excellent entry point into the cybersecurity field, providing tangible proof of a candidate's ability to perform basic offensive security tasks. It bridges the gap between academic knowledge and job-ready skills, making certified individuals immediately valuable to security teams. The certification's emphasis on a holistic attack chain and reporting makes it particularly relevant for roles such as Security Analyst, Junior Penetration Tester, and Vulnerability Assessment Specialist.
Preguntas de Muestra
Elige una respuesta y consulta la explicación para ver cómo funciona la práctica.
During the reporting phase of an authorized pentest, you need to explain the Penetration Testing Execution Standard (PTES) to a junior team member. Which phase of PTES specifically covers defining the rules of engagement, getting authorization, and setting liability boundaries BEFORE any technical work begins?
During an authorized pentest, you achieve initial access via a phishing payload and have a low-privilege Windows shell. You run `whoami /priv` and see `SeImpersonatePrivilege` is enabled. What privilege escalation technique does this enable, which tools implement it, and what type of account typically has this privilege?
You are reviewing OSI model layers in preparation for an authorized network assessment. A colleague asks: "At which layer does a VLAN tag (802.1Q) operate, and at which layer does IP routing between subnets occur?" What is the correct answer?
During an authorized web application pentest, you use sqlmap to automate SQL injection testing. You run `sqlmap -u "http://10.10.10.80/search.php?q=test" --dbs`. After detection, sqlmap confirms SQLi and lists databases: `[*] information_schema`, `[*] acmecorp`, `[*] mysql`. You then run `sqlmap -u "http://10.10.10.80/search.php?q=test" -D acmecorp --tables`. What is the next command to dump the contents of a table named `users`?
During an authorized assessment, Nessus identifies a finding: "SSL Certificate Cannot Be Trusted" on port 443 of 10.10.10.90, severity Medium. During manual investigation, you find the certificate is a self-signed certificate issued by the server itself (not a trusted CA). What practical attack does this enable, and what is the correct remediation?
Qué temas cubre este examen
Usa las ponderaciones publicadas de los dominios para planificar tu estudio. Los resultados de práctica no predicen tu puntuación en el examen de certificación.
01Host and Network Penetration Testing
Temas
- Identify and modify exploits
- Conduct exploitation with metasploit
- Demonstrate pivoting by adding a route and by port forwarding
- Conduct brute-force password attacks and hash cracking
Objetivos de aprendizaje
- Identify and modify exploits
- Conduct exploitation with metasploit
- Demonstrate pivoting by adding a route and by port forwarding
- Conduct brute-force password attacks and hash cracking
02Assessment Methodologies
Temas
- Locate endpoints on a network
- Identify open ports and services on a target
- Identify operating system of a target
- Extract company information from public sources
- Gather email addresses from public sources
- Gather technical information from public sources
- Identify vulnerabilities in services
- Evaluate information and criticality or impact of vulnerabilities
Objetivos de aprendizaje
- Locate endpoints on a network
- Identify open ports and services on a target
- Identify operating system of a target
- Extract company information from public sources
- Gather email addresses from public sources
- Gather technical information from public sources
- Identify vulnerabilities in services
- Evaluate information and criticality or impact of vulnerabilities
03Host and Networking Auditing
Temas
- Compile information from files on target
- Enumerate network information from files on target
- Enumerate system information on target
- Gather user account information on target
- Transfer files to and from target
- Gather hash/password information from target
Objetivos de aprendizaje
- Compile information from files on target
- Enumerate network information from files on target
- Enumerate system information on target
- Gather user account information on target
- Transfer files to and from target
- Gather hash/password information from target
04Web Application Penetration Testing
Temas
- Identify vulnerabilities in web applications
- Locate hidden file and directories
- Conduct brute-force login attack
- Conduct web application reconnaissance
Objetivos de aprendizaje
- Identify vulnerabilities in web applications
- Locate hidden file and directories
- Conduct brute-force login attack
- Conduct web application reconnaissance