Certification guide
eJPTINE eLearnSecurity Junior Penetration Tester: the honest guide
eJPT is a practical exam. There is no question paper: you are given a network, 48 hours and a set of questions you answer from what you find. Pass or fail depends on whether you can actually enumerate, exploit and pivot, not on whether you can describe doing so.
That makes it the most honest entry-level penetration testing certification available, and also the one most likely to expose somebody who has only watched videos. It never expires, which is unusual, so the money is spent once.
Who eJPT is for
A good fit if
- You want to prove hands-on offensive skill at entry level rather than knowledge of offensive concepts.
- You are working toward a junior penetration testing or red team role and need something practical on a CV.
- You have practised on free vulnerable machines and want a structured assessment of whether it adds up.
- You want a certification with no expiry and no renewal fee.
Probably not, if
- You need a certification recognised by HR filters. PenTest+ and the CompTIA family are named far more often in job postings, even though this exam tests more.
- You have never used a terminal. This is hands-on from the first minute and it does not teach fundamentals.
- You want defensive security. Everything here is offensive methodology, and CyberOps or Security+ are the relevant alternatives.
Is eJPT worth it?
As evidence that you can do the work, yes. A practical exam is much harder to fake than a multiple-choice one, and people who assess candidates for junior offensive roles know that, so it carries weight where it is recognised.
As a credential to get through automated screening, it is weaker than its difficulty deserves. Fewer recruiters know it than know CompTIA, so treat it as something that helps you in a technical conversation rather than something that gets you into one.
The never-expiring position is worth real money over a career. Most certifications in this catalog charge again every one to three years; this one does not, so its lifetime cost is lower than several with smaller headline prices.
What the exam actually asks you to do
A hands-on lab. You are given a real target network and 48 hours, and the questions are answered from what you find by actually attacking it.
Item formats
- Hands-on lab
- Multiple choice
The highlighted formats are the ones you cannot answer from memory alone. INE, eJPT certification details ↗
Domain breakdown and official weightings
From the official INE exam blueprints. Host and Network Penetration Testing is the heaviest domain at 35 percent, followed by Assessment Methodologies at 25 percent.
- Assessment Methodologies25%
- Host and Network Auditing20%
- Host and Network Penetration Testing35%
- Web Application Penetration Testing20%
Where to focus: Host and network penetration testing is the largest block at 35 percent, but it is unreachable without the enumeration in Assessment Methodologies. Practise the first hour of an engagement until it is boring.
Study plans by experience level
Some Linux and networking, new to offensive work
10 to 12 weeksat 8 hours
- 1Weeks 1 to 3: enumeration until it is boring. Scanning, service identification and taking notes on what you found. Most exam failures trace back to weak enumeration rather than to a missed exploit.
- 2Weeks 4 to 6: exploitation of common services on free vulnerable machines. Volume matters more than difficulty at this stage.
- 3Weeks 7 to 8: web application basics, which are a fifth of the exam and often the weakest area for people who came from infrastructure.
- 4Weeks 9 to 10: pivoting specifically. Routing through a compromised host into a network you could not previously reach is examinable and it is the thing people meet first under the clock.
- 5Weeks 11 to 12: full practice runs with the note-taking discipline you will use in the exam.
Working in IT, comfortable with the tooling
5 to 6 weeksat 8 hours
- 1Week 1: work three free machines end to end and be honest about where you reached for a walkthrough.
- 2Weeks 2 to 3: close whichever gaps that exposed, most commonly web application testing or post-exploitation.
- 3Week 4: pivoting drills, because infrastructure people usually practise single isolated hosts.
- 4Weeks 5 to 6: two timed runs with structured notes, treating each as the real thing.
Career changer with no IT background
16 to 20 weeksat 8 hours
- 1Learn Linux and networking first. This exam assumes both and teaches neither, and the fastest route through it is to arrive already comfortable in a shell.
- 2Weeks 1 to 6: Linux command line, basic scripting, and networking fundamentals with Wireshark open.
- 3Weeks 7 to 12: enumeration and exploitation on free vulnerable machines, starting with guided ones and moving to unguided.
- 4Weeks 13 to 16: web application testing and post-exploitation.
- 5Weeks 17 to 20: pivoting, then full timed practice runs.
Common mistakes
- Weak note-taking
- The exam gives you 48 hours, a network and questions you answer from your findings. Candidates who lose the attempt usually lost it by not recording what they established on which host, then re-enumerating the same machine twice. Practise the notes, not just the exploitation.
- Never practising a pivot
- eJPT expects you to move from a foothold into a network segment you could not previously reach. People who only practise isolated single machines meet that requirement for the first time in the exam, and it costs them hours.
- Skipping web application testing
- It is a fifth of the exam and it is the area infrastructure-minded candidates most often deprioritise. The techniques involved are entry level, so the marks are cheap if you spend any time at all on them.
- Relying on automated tools without understanding them
- Automated exploitation frameworks are allowed and useful, and they fail silently in ways you have to recognise. Candidates who cannot verify a result by hand tend to accept a false negative and conclude a host is not vulnerable.
- Treating 48 hours as a lot of time
- It is generous only if you are organised. Without a plan for which hosts to work in what order, the window disappears into re-scanning and re-reading, and the questions are answered in a rush at the end.
What comes after passing
The natural progression is a more demanding practical certification, or a role. eJPT is explicitly junior, and the honest next step for most people is doing the work rather than immediately buying the next exam.
PenTest+ is the complementary choice if you need something recruiters recognise, since it covers engagement management and reporting that eJPT does not test.
Because eJPT never expires, there is nothing to renew and no ongoing cost. The trade is that it evidences a date rather than currency, so keep practising visibly if offensive work is the goal.
Whatever comes next, keep the notes habit. Reporting is most of the actual job in penetration testing, and the exam's note-taking discipline is the part that transfers most directly to paid work.
Where people go next
Costs across the full renewal cycle are on the eJPT cost page.
Frequently asked questions
Is eJPT harder than PenTest+?
They are hard in different ways. PenTest+ is a written exam covering a broader syllabus including scoping, reporting and compliance. eJPT is narrower and entirely practical, so it is harder to pass without genuine hands-on ability and easier for somebody who has spent months on vulnerable machines.
Do I need to buy the INE course to sit the exam?
No, the voucher can be bought on its own. The matching Penetration Testing Student path is the material written against the exam, and INE has run it free of charge at times, so check the current position before paying for a subscription for it.
How long is the exam and can I stop partway?
You get 48 hours, and you are not expected to work continuously through them. The window is deliberately long so that sleep and breaks are possible, and candidates who treat it as a two-day project rather than a marathon generally do better.
Does eJPT expire?
No. It does not expire and there is no renewal fee, which is unusual in this catalog. The trade is that it evidences your ability on the date you passed rather than showing you are currently practising, so the burden of demonstrating currency sits with you.
Will eJPT get me a penetration testing job?
On its own, rarely. It is a junior credential and the market for entry-level offensive roles is competitive. It is most effective combined with visible practice, a home lab you can talk about, and a role adjacent to security that you can move from.
Keep reading
- eJPT practice questions
Free sample questions with the full explanation on every answer.
- Free eJPT practice test
Ten real questions, playable now. No account, no card.
- eJPT passing score
The exact cut score, what kind of number it is, and the retake terms.
- How hard is eJPT?
An honest difficulty read from the format, the clock and the weights.
- What eJPT costs
The voucher price, the retake, and what renewal costs across the cycle.
Practise eJPT for free while you decide
Original questions written from the published objectives, with the concept, the reasoning, and a note on every wrong option. No account needed to start.
Start free eJPT questions