Practice Exam 1
5 of this form’s 35 questions, drawn from across its domains, free. The explanation on every one of them is free too, at every tier, and always will be.
Question 1 of 5
Host and Network Penetration TestingA tester wants to reach an internal subnet that has no route from the attacking machine. What must the host they have already compromised provide for pivoting to be possible?
Question 2 of 5
Host and Network AuditingA wrapper script runs a scan asking for grepable output on standard out, then fails to find its results. A file named G- has appeared in the working directory. What went wrong?
Question 3 of 5
Host and Network Penetration TestingA host has tty_tickets disabled for sudo. You gain a shell as a user who recently ran sudo. Why does that combination raise the escalation risk?
Question 4 of 5
Web Application Penetration TestingIn your remediation advice for a path traversal finding, which measure does the source name as the most effective?
Question 5 of 5
Assessment MethodologiesAn engineer must run scripts against a list of addresses with neither host discovery nor a port scan performed against them. Which combination does that?
0 of 35 completed
The other 30 questions are the rest of this form: same 2880 minute clock, same 70 cut score, and the same explanation on every question, which is never behind the wall. Practice Exam 1 of 2 on eJPT.
What this exam covers
- Assessment Methodologies9 questions / 25% of the exam
- Host and Network Auditing7 questions / 20% of the exam
- Host and Network Penetration Testing12 questions / 35% of the exam
- Web Application Penetration Testing7 questions / 20% of the exam
Checking what you already have access to.
Every question is original, written from the published objectives. We never reproduce, paraphrase, or imitate real exam content, and neither should anything else you study from.