Get GPEN Braindumps & GPEN Real Exam Questions
GIAC GPEN Actual Questions and Braindumps
Candidates who wish to take the GIAC GPEN exam are expected to have extensive knowledge of various cybersecurity concepts such as networking, operating systems, web applications, programming languages, ethical hacking and penetration testing techniques. Candidates must also have hands-on experience in penetration testing and vulnerability assessment. GIAC Certified Penetration Tester certification has a rigorous application process that involves submitting proof of experience and academic credentials.
GIAC GPEN certification exam is a challenging and comprehensive test that assesses a candidate's mastery in penetration testing and ethical hacking techniques. GIAC Certified Penetration Tester certification is well-regarded in the industry and an excellent way for professionals to demonstrate their expertise in information security. If you are looking to advance your career in the field of information security and penetration testing, the GIAC GPEN certification exam is an excellent place to start.
GIAC GPEN certification is designed to help professionals become proficient in penetration testing and improve their career prospects. GIAC Certified Penetration Tester certification provides a demonstration of one's capabilities and expertise in the field of cybersecurity. Additionally, the certification is vendor-neutral, meaning it provides a broader scope of knowledge concerning different technologies, tools, and techniques that are relevant to the delivery of cybersecurity services, making it highly sought-after in the job market.
NEW QUESTION # 211
You've been contracted by the owner of a secure facility to try and break into their office in the middle of the night. Your client requested photographs of any sensitive information found as proof of your accomplishments.
The job you've been hired to perform is an example of what practice?
- A. Security Auditing
- B. Ethical Hacking
- C. Vulnerability Assessing
- D. Penetration Testing
Answer: B
Explanation:
Section: Volume A
NEW QUESTION # 212
A junior penetration tester at your firm is using a non-transparent proxy for the first time to test a web server. He sees the web site In his browser but nothing shows up In the proxy. He tells you that he just installed the non-transparent proxy on his computer and didn't change any defaults. After verifying the proxy is running, you ask him to open up his browser configuration, as shown in the figure, which of the following recommendations will correctly allow him to use the transparent proxy with his browser?
- A. He should select NO PROXY instead of MANUAL PROXY CONFIGURATION as thissetting is only necessary to access the Internet behind protected networks.
- B. He should change the PORT: value to match the port used by the non-transparentproxy.
- C. He should change the HTTP PROXY value to 127.0.0.1 since the non-transparentproxy is running on the same machine as the browser.
- D. He should select the checkbox "use this proxy server for all protocols" for theproxy to function correctly.
Answer: C
NEW QUESTION # 213
You work as a Network Penetration tester in the Secure Inc. Your company takes the projects to test the security of various companies. Recently, Secure Inc. has assigned you a project to test the security of a Web site. You go to the Web site login page and you run the following SQL query:
SELECT email, passwd, login_id, full_name
FROM members
WHERE email = '[email protected]'; DROP TABLE members; --'
What task will the above SQL query perform?
- A. Deletes the entire members table.
- B. Performs the XSS attacks.
- C. Deletes the database in which members table resides.
- D. Deletes the rows of members table where email id is '[email protected]' given.
Answer: A
NEW QUESTION # 214
Which of the following can be the countermeasures to prevent NetBIOS NULL session enumeration in Windows 2000 operating systems?
Each correct answer represents a complete solution. Choose all that apply.
- A. Disabling TCP port 139/445
- B. Disabling SMB services entirely on individual hosts by unbinding WINS Client TCP/IP from the interface
- C. Editing the registry key HKLM\SYSTEM\CurrentControlSet\LSA and adding the value RestrictAnonymous
- D. Denying all unauthorized inbound connections to TCP port 53
Answer: A,B,C
NEW QUESTION # 215
You work as a Computer Hacking Forensic Investigator for SecureNet Inc. You want to investigate Cross-Site Scripting attack on your company's Website. Which of the following methods of investigation can you use to accomplish the task?
Each correct answer represents a complete solution. Choose all that apply.
- A. Look at the Web servers logs and normal traffic logging.
- B. Use a Web proxy to view the Web server transactions in real time and investigate any communication with outside servers.
- C. Review the source of any HTML-formatted e-mail messages for embedded scripts or links in the URL to the company's site.
- D. Use Wireshark to capture traffic going to the server and then searching for the requests going to the input page, which may give log of the malicious traffic and the IP address of the source.
Answer: A,B,C
NEW QUESTION # 216
John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He wants to perform a stealth scan to discover open ports and applications running on the We-are-secure server. For this purpose, he wants to initiate scanning with the IP address of any third party. Which of the following scanning techniques will John use to accomplish his task?
- A. TCP SYN/ACK
- B. IDLE
- C. UDP
- D. RPC
Answer: B
NEW QUESTION # 217
John, a novice web user, makes a new E-mail account and keeps his password as "apple", his favorite fruit. John's password is vulnerable to which of the following password cracking attacks?
Each correct answer represents a complete solution. Choose all that apply.
- A. Hybrid attack
- B. Dictionary attack
- C. Rule based attack
- D. Brute Force attack
Answer: A,B,D
NEW QUESTION # 218
Adam works as a professional Computer Hacking Forensic Investigator. He works with the local police. A project has been assigned to him to investigate an iPod, which was seized from a student of the high school. It is suspected that the explicit child pornography contents are stored in the iPod. Adam wants to investigate the iPod extensively. Which of the following operating systems will Adam use to carry out his investigations in more extensive and elaborate manner?
- A. Linux
- B. MINIX 3
- C. Mac OS
- D. Windows XP
Answer: C
Explanation:
Section: Volume B
NEW QUESTION # 219
You are performing a wireless penetration lest and are currently looking for rogue access points in one of their large facilities. You need to select an antenna that you can setup in a building and monitor the area for several days to see if any access points are turned on during the duration of the test. What type of antenna will you be selecting for this task?
- A. Low gain and Omni-Directional
- B. Low gain and Directional
- C. High gain and Omni-Directional
- D. High gain and Directional
Answer: D
Explanation:
Section: Volume A
NEW QUESTION # 220
Which of the following describes the direction of the challenges issued when establishing a wireless (IEEE 802.11) connection?
- A. Two-way, both the client and the access point challenge each other
- B. One-way, the access point challenges the client
- C. No challenges occur (or wireless connection
- D. One-way, the client challenges the access point
Answer: A
NEW QUESTION # 221
While scanning a remote system that is running a web server with a UDP scan and monitoring the scan with a sniffer, you notice that the target is responding with ICMP Port Unreachable only once a second What operating system is the target likely running?
- A. OpenBSD
- B. Windows
- C. Linux
- D. Mac OS X
Answer: C
Explanation:
Section: Volume A
NEW QUESTION # 222
John works as a professional Ethical Hacker. He is assigned a project to test the security of www.we-are- secure.com. John has gained the access to the network of the organization and placed a backdoor in the network. Now, he wants to clear all event logs related to previous hacking attempts. Which of the following tools can John use if we-are-secure.com is using the Windows 2000 server?
Each correct answer represents a complete solution. Choose two.
- A. elsave.exe
- B. Blindside
- C. WinZapper
- D. AuditPol
Answer: A,C
Explanation:
Section: Volume C
NEW QUESTION # 223
You work as a Network Administrator for Tech Perfect Inc. The company has a TCP/IP-based network. Rick, your assistant, is configuring some laptops for wireless access. For security, WEP needs to be configured for wireless communication. By mistake, Rick configures different WEP keys in a laptop than that is configured on the Wireless Access Point (WAP). Which of the following statements is true in such situation?
- A. The laptop will not be able to access the wireless network.
- B. The WAP will allow the connection with the guest account's privileges.
- C. The laptop will be able to access the wireless network but the security will be compromised
- D. The laptop will be able to access the wireless network but other wireless devices will be unable to communicate with it.
Answer: A
Explanation:
Section: Volume B
Explanation/Reference:
NEW QUESTION # 224
In which of the following scanning methods does an attacker send SYN packets and then a RST packet?
- A. TCP FIN scan
- B. IDLE scan
- C. TCP SYN scan
- D. XMAS scan
Answer: C
NEW QUESTION # 225
You are pen testing a system and want to use Metasploit 3.X to open a listening port on the system so you can access it via a netcat shell. Which stager would you use to have the system listen on TCP port 50000?
- A. Bind.tcp
- B. Reverse.tcp
- C. Fincltag.ord
- D. Passivex
Answer: A
NEW QUESTION # 226
You have been contracted to map me network and try to compromise the servers for a client. Which of the following would be an example of scope creep' with respect to this penetration testing project?
- A. Disclosing information forbidden in the NDA
- B. Compromising a server then escalating privileges
- C. Being asked to compromise workstations
- D. Scanning network systems slowly so you are not detected
Answer: B
Explanation:
Section: Volume A
NEW QUESTION # 227
Which of the following password cracking tools can work on the Unix and Linux environment?
- A. Brutus
- B. Cain and Abel
- C. John the Ripper
- D. Ophcrack
Answer: C
NEW QUESTION # 228
You are concerned about rogue wireless access points being connected to your network. What is the best way to detect and prevent these?
- A. Network anti-virus software
- B. Network anti-spyware software
- C. Protocol analyzers
- D. Site surveys
Answer: D
Explanation:
Section: Volume B
NEW QUESTION # 229
John works as a Penetration Tester in a security service providing firm named you-are-secure Inc.
Recently, John's company has got a project to test the security of a promotional Website www.missatlanta.com and assigned the pen-testing work to John. When John is performing penetration testing, he inserts the following script in the search box at the company home page:
<script>alert('Hi, John')</script>
After pressing the search button, a pop-up box appears on his screen with the text - "Hi, John."
Which of the following attacks can be performed on the Web site tested by john while considering the above scenario?
- A. CSRF attack
- B. Buffer overflow attack
- C. XSS attack
- D. Replay attack
Answer: C
NEW QUESTION # 230
Which Metasploit payload includes simple upload and download functionality for moving files to and from compromised systems?
- A. Upexec
- B. Meterpreter
- C. Vncinject
- D. DLL inject
Answer: C
Explanation:
Section: Volume A
Explanation/Reference:
http://www.opensourceforu.com/2011/02/metasploit-meterpreter-payload/
NEW QUESTION # 231
You work as a professional Computer Hacking Forensic Investigator for DataEnet Inc. You want to investigate e-mail information of an employee of the company. The suspected employee is using an online e-mail system such as Hotmail or Yahoo. Which of the following folders on the local computer will you review to accomplish the task?
Each correct answer represents a complete solution. Choose all that apply.
- A. Temporary Internet Folder
- B. History folder
- C. Download folder
- D. Cookies folder
Answer: A,B,D
NEW QUESTION # 232
Analyze the screenshot below. What type of vulnerability is being attacked?
- A. Windows Server service
- B. Local Security Authority
- C. Internet Explorer
- D. Windows Powershell
Answer: C
NEW QUESTION # 233
You work as a Network Security Analyzer. You got a suspicious email while working on a forensic project. Now, you want to know the IP address of the sender so that you can analyze various information such as the actual location, domain information, operating system being used, contact information, etc. of the email sender with the help of various tools and resources. You also want to check whether this email is fake or real. You know that analysis of email headers is a good starting point in such cases. The email header of the suspicious email is given below: What is the IP address of the sender of this email?
- A. 209.191.91.180
- B. 172.16.10.90
- C. 216.168.54.25
- D. 141.1.1.1
Answer: C
NEW QUESTION # 234
......
GPEN Dumps To Pass GIAC Exam in 24 Hours - DumpExam: https://www.dumpexam.com/GPEN-valid-torrent.html
Buy Latest GPEN Exam Q&A PDF - One Year Free Update: https://drive.google.com/open?id=18iQVGlCopCJ4sY8FbuwZQFbAao9zze99
