[Q201-Q224] 100% Guaranteed Results GPEN Unlimited 405 Questions [2023]

Rate this post

100% Guaranteed Results GPEN Unlimited 405 Questions [2023]

GPEN Dumps PDF – Want To Pass GPEN Fast

To prepare for the GPEN certification, candidates can enroll in training programs, attend boot camps or self-study. The GIAC offers a wide range of training options and study materials to assist candidates in preparing for the exam. Self-study materials include books, online resources, and practice exams that are accessible from the GIAC website. The training programs and boot camps are led by qualified instructors and allow candidates to gain practical knowledge and experience in penetration testing. Investing in training programs can significantly increase the chances of passing the GIAC GPEN certification exam on the first attempt.

To become a GPEN certified professional, candidates are required to demonstrate competence in various areas such as reconnaissance, scanning, enumeration, exploitation, post-exploitation, and reporting. They must also possess a solid understanding of tools and techniques used in ethical hacking and penetration testing.

NO.201 Which of the following tools is an example of HIDS?

Anti-Spector

Auditpol.exe

Elsave

Log File Monitor

NO.202 Adam works as a professional Computer Hacking Forensic Investigator. He wants to investigate a suspicious email that is sent using a Microsoft Exchange server. Which of the following files will he review to accomplish the task?
Each correct answer represents a part of the solution. Choose all that apply.

Checkpoint files

cookie files

Temporary files

EDB and STM database files

Section: Volume B
Explanation

NO.203 Which type of Cross-Sire Scripting (XSS> vulnerability is hardest for automated testing tools to detect, and for what reason?

Stored XSS. because it may be located anywhere within static or dynamic sitecontent

Stored XSS. because it depends on emails and instant messaging systems.

Reflected XSS. because It can only be found by analyzing web server responses.

Reflected XSS: because it is difficult to find within large web server logs.

NO.204 Analyze the command output below, what action is being performed by the tester?

Displaying a Windows SAM database

Listing available workgroup services

Discovering valid user accounts

Querying locked out user accounts

NO.205 What is the impact on pre-calculated Rainbow Tables of adding multiple salts to a set of passwords?

Salts increases the time to crack the original password by increasing the number oftables that must be calculated.

Salts double the total size of a rainbow table database.

Salts can be reversed or removed from encoding quickly to produce unsaltedhashes.

Salts have little effect because they can be calculated on the fly with applicationssuch as Ophcrack.

NO.206 Which of the following tools will you use to prevent from session hijacking?
Each correct answer represents a complete solution. Choose all that apply.

Telnet

OpenSSH

SSL

Rlogin

NO.207 Which of the following is a passive information gathering tool?

Whois

Snort

Ettercap

Nmap

NO.208 Which of the following tools can be used to perform Windows password cracking, Windows enumeration, and VoIP session sniffing?

L0phtcrack

John the Ripper

Cain

Pass-the-hash toolkit

Section: Volume C

NO.209 Which Metasploit payload includes simple upload and download functionality for moving files to and from compromised systems?

DLL inject

Upexec

Meterpreter

Vncinject

Section: Volume A
Explanation/Reference:
http://www.opensourceforu.com/2011/02/metasploit-meterpreter-payload/

NO.210 You enter the following URL on your Web browser:
http://www.we-are-secure.com/scripts/..%co%af../..%co%
af../windows/system32/cmd.exe?/c+dir+c:
What kind of attack are you performing?

Session hijacking

Replay

URL obfuscating

Directory traversal

NO.211 Which of the following is generally practiced by the police or any other recognized governmental authority?

Spoofing

Wiretapping

Phishing

SMB signing

NO.212 In which of the following scanning methods does an attacker send SYN packets and then a RST packet?

TCP SYN scan

XMAS scan

IDLE scan

TCP FIN scan

Section: Volume C

NO.213 You have just set up a wireless network for customers at a coffee shop. Which of the following are good security measures to implement?
Each correct answer represents a complete solution. Choose two.

MAC filtering the router

Using WPA encryption

Using WEP encryption

Not broadcasting SSID

NO.214 You successfully compromise a target system’s web application using blind command injection.
The command you injected is ping-n 1 192.168.1.200. Assuming your machine is 192.168.1 200, which of the following would you see?

Ping-n 1 192.168.1 200 on the compromised system

A ‘Destination host unreachable’ error message on the compromised system

A packet containing ‘Packets: Sent – 1 Received = 1, Loss = 0 (0% loss) on yoursniffer

An ICMP Echo packet on your sniffer containing the source address of the target

NO.215 Which of the following wireless security standards supported by Windows Vista provides the highest level of security?

WPA2

WPA-PSK

WEP

WPA-EAP

NO.216 John works as a Penetration Tester in a security service providing firm named you-are-secure Inc.
Recently, John’s company has got a project to test the security of a promotional Website www.missatlanta.com and assigned the pen-testing work to John. When John is performing penetration testing, he inserts the following script in the search box at the company home page:
<script>alert(‘Hi, John’)</script>
After pressing the search button, a pop-up box appears on his screen with the text – “Hi, John.” Which of the following attacks can be performed on the Web site tested by john while considering the above scenario?

Replay attack

Buffer overflow attack

CSRF attack

XSS attack

Section: Volume B

NO.217 Which of the following worms performs random scanning?

BugBear

SirCam

Code red worm

Klez

Section: Volume D
Explanation/Reference:

NO.218 John works as a Professional Penetration Tester. He has been assigned a project to test the Website security of www.we-are-secure Inc. On the We-are-secure Website login page, he enters =’or”=’ as a username and successfully logs on to the user page of the Web site. Now, John asks the we-are-secure Inc. to improve the login page PHP script. Which of the following suggestions can John give to improve the security of the we-are- secure Website login page from the SQL injection attack?

Use the escapeshellarg() function

Use the session_regenerate_id() function

Use the mysql_real_escape_string() function for escaping input

Use the escapeshellcmd() function

Section: Volume B

NO.219 John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He is using a tool to crack the wireless encryption keys. The description of the tool is as follows:

Which of the following tools is John using to crack the wireless encryption keys?

Kismet

AirSnort

Cain

PsPasswd

NO.220 Which of the following tools can be used to automate the MITM attack?

Hotspotter

Airjack

Kismet

IKECrack

Section: Volume C

NO.221 You have gained shell on a Windows host and want to find other machines to pivot to, but the rules of engagement state that you can only use tools that are already available. How could you find other machines on the target network?

Use the “ping” utility to automatically discover other hosts

Use the “ping” utility in a for loop to sweep the network.

Use the “edit” utility to read the target’s HOSTS file.

Use the “net share” utility to see who is connected to local shared drives.

Explanation/Reference:
Reference:
http://www.slashroot.in/what-ping-sweep-and-how-do-ping-sweep

NO.222 Which of the following best describes a client side exploit?

Attack of a client application that retrieves content from the network

Attack that escalates user privileged to root or administrator

Attack of a service listening on a client system

Attack on the physical machine

Section: Volume A

NO.223 You enter the following URL on your Web browser:
http://www.we-are-secure.com/scripts/..%co%af../..%co%
af../windows/system32/cmd.exe?/c+dir+c:
What task do you want to perform?

Perform buffer overflow attack.

Perform DDoS attack.

View the directory list of c drive.

Perform DoS attack.

NO.224 Analyze the screenshot below. What event is depicted?