eJPT practice examsIn development
INE Security Junior Penetration Tester
The first penetration testing certification: reconnaissance and enumeration with Nmap, auditing hosts within an agreed scope, exploitation with Metasploit, the common web application flaws, and post-exploitation with privilege escalation and pivoting.
What you get
Papers are cut from the bank and weighted like the real exam, and no question appears in two of them. Every wrong answer comes back on later days until you have it right.
What the exam covers
| Assessment methodology: information gathering, scanning and enumeration | Not published |
| Host and network auditing | Not published |
| Host and network penetration testing, including Metasploit | Not published |
| Web application penetration testing | Not published |
| Post-exploitation basics and pivoting | Not published |
Two sample questions
1. Why does a tester migrate a Meterpreter session to another process?
- To survive the exploited process ending and gain the target's privileges — correct
- To move the session onto a host with outbound access to the tester
- To avoid writing the payload to disk where it would be detected
- To change the architecture that the session is running under at the time
Why: The exploited process is often short-lived or unstable, and migration also allows a move to a process running as a different user.
2. What does post-exploitation enumeration on a compromised host seek?
- The version of each package installed so the missing fixes are identified
- Credentials, reachability and trust relationships for further movement — correct
- The users who have logged in recently and the times they did so
- The files the compromised account is able to read on that host
Why: The value of a foothold lies in what it reaches, so the enumeration targets what will extend access rather than describing the host itself.
The real eJPT exam
| Length | 48 hours of laboratory access |
|---|---|
| Questions | Around 35 questions answered by working through a live laboratory. No report is required. |
| Pass mark | 70% |
| Price | $249 USD, or included in an INE subscription |
| Recommended before you sit it | None. Networking fundamentals and comfort with a Linux command line are assumed. |
| Valid for | No expiry |
Exam facts as published by INE Security; always check the vendor’s page before you book.
Study eJPT with Chiron
Chiron is invitation-only while we are in beta, and nothing is for sale yet: invited accounts use every paper, drill and course note for free.