[May 06, 2022] Actual4dump GPEN Exam Practice Test Questions (Updated 385 Questions)
Pass GIAC GPEN Exam Info and Free Practice Test
NEW QUESTION 78
You work as a Network Administrator for Tech Perfect Inc. The company requires a secure wireless network. To provide security, you are configuring ISA Server 2006 as a firewall. While configuring ISA Server 2006, which of the following is NOT necessary?
- A. Defining how ISA Server would cache Web contents
- B. Defining ISA Server network configuration
- C. Configuration of VPN access
- D. Setting up of monitoring on ISA Server
Answer: C
NEW QUESTION 79
In which of the following scanning methods does an attacker send SYN packets and then a RST packet?
- A. XMAS scan
- B. TCP FIN scan
- C. IDLE scan
- D. TCP SYN scan
Answer: D
NEW QUESTION 80
Analyze the output of the two commands below:
Which of the following can be factually inferred from the results of these commands?
- A. The router 10 63.104 206 is dropping ICMP traceroute.
- B. The host 10.63.104.1 is silently dropping UDP packets.
- C. The router 192.16S.U6.1 is filtering UDP traceroute.
- D. The host 10.63.104.1 is not issuing ICMP packets.
Answer: D
NEW QUESTION 81
Which of the following is the correct syntax to create a null session?
- A. c:\>net use \\IPC$\IP_addr "" /u: ""
- B. c:\>net use \\IP_addr\IPC$ "" /u: ""
- C. c:\>net view \\IP_addr\IPC$ "" /u: ""
- D. c:\>net view \\IPC$\IP_addr "" /u: ""
Answer: B
NEW QUESTION 82
You work as a Network Administrator in the SecureTech Inc. The SecureTech Inc. is using Linuxbased server. Recently, you have updated the password policy of the company in which the server will disable passwords after four trials. What type of attack do you want to stop by enabling this policy?
- A. Cookie poisoning
- B. Brute force
- C. Replay
- D. XSS
Answer: B
NEW QUESTION 83
You work as a Penetration Tester for the Infosec Inc. Your company takes the projects of security auditing. Recently, your company has assigned you a project to test the security of the wearesecure. com Web site. For this, you want to perform the idle scan so that you can get the ports open in the we-are-secure.com server. You are using Hping tool to perform the idle scan by using a zombie computer. While scanning, you notice that every IPID is being incremented on every query, regardless whether the ports are open or close. Sometimes, IPID is being incremented by more than one value. What may be the reason?
- A. The zombie computer is not connected to the we-are-secure.com Web server.
- B. The firewall is blocking the scanning process.
- C. Hping does not perform idle scanning.
- D. The zombie computer is the system interacting with some other system besides your comp uter.
Answer: D
NEW QUESTION 84
You run the following bash script in Linux:
for i in 'cat hostlist.txt' ;do nc -q 2 -v $i 80 < request.txt done where, hostlist.txt file contains the list of IP addresses and request.txt is the output file.
Which of the following tasks do you want to perform by running this script?
- A. You want to perform banner grabbing to the hosts given in the IP address list.
- B. You want to put nmap in the listen mode to the hosts given in the IP address list.
- C. You want to transfer file hostlist.txt to the hosts given in the IP address list.
- D. You want to perform port scanning to the hosts given in the IP address list.
Answer: A
NEW QUESTION 85
What is the purpose of the following command?
C:\>wmic /node:[target IP] /user:[admin-user]
/password:[password] process call create [command]
- A. Running a command on a remote Windows machine
- B. Creating a service on a remote Windows machine
- C. Creating an admin account on a remote Windows machine
- D. Listing the running processes on a remote windows machine
Answer: D
Explanation:
Section: Volume A
NEW QUESTION 86
192.168.116.9 Is an IP address forvvww.scanned-server.com. Why are the results from the two scans, shown below, different?
- A. John.ini
- B. John.rec
- C. John conf
- D. John.pot
Answer: B
Explanation:
Section: Volume A
NEW QUESTION 87
Which of the following can be used to mitigate the evil twin phishing attack?
- A. Obiwan
- B. Magic Lantern
- C. IPSec VPN
- D. SARA
Answer: C
NEW QUESTION 88
- A. A and D
- B. A competitor's employee's scanning the company's website.
- C. Running a Nessus scan from the sales department network.
- D. SQL injection attacks against the hr intranet website.
- E. B and D
- F. A, B. and D
- G. Wireless "war driving" the company manufacturing site.
- H. B, C, and D
Answer: E,G
Explanation:
Section: Volume A
NEW QUESTION 89
How many bits encryption does SHA-1 use?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
NEW QUESTION 90
Adam, a malicious hacker, hides a hacking tool from a system administrator of his company by using Alternate Data Streams (ADS) feature. Which of the following statements is true in context with the above scenario?
- A. Adam is using NTFS file system.
- B. Adam is using FAT file system.
- C. Adam's system runs on Microsoft Windows 98 operating system.
- D. Alternate Data Streams is a feature of Linux operating system.
Answer: A
Explanation:
Section: Volume C
Explanation/Reference:
NEW QUESTION 91
If the privacy bit is set in the 802.11 header, what does it indicate?
- A. SSID cloaking is being used.
- B. WAP is being used.
- C. Some form of encryption is In use.
- D. Some form of PEAP is being used.
Answer: B
NEW QUESTION 92
You work as a Network Administrator in the Secure Inc. Your company is facing various network attacks due to the insecure wireless network. You are assigned a task to secure your wireless network. For this, you have turned off broadcasting of the SSID. However, the unauthorized users are still able to connect to the wireless network. Which of the following statements can be the reason for this issue?
Each correct answer represents a complete solution. Choose all that apply.
- A. You have forgotten to turn off DHCP.
- B. The SSID is still sent inside both client and AP packets.
- C. You are using WPA2 security scheme.
- D. You are using the default SSID.
Answer: A,B,D
NEW QUESTION 93
You work as an IT Technician for PassGuide Inc. You have to take security measures for the wireless network of the company. You want to prevent other computers from accessing the company's wireless network. On the basis of the hardware address, which of the following will you use as the best possible method to accomplish the task?
- A. SSID
- B. WEP
- C. MAC Filtering
- D. RAS
Answer: C
NEW QUESTION 94
Which of the following worms performs random scanning?
- A. Klez
- B. BugBear
- C. Code red worm
- D. SirCam
Answer: C
NEW QUESTION 95
You run the following command while using Nikto Web scanner:
perl nikto.pl -h 192.168.0.1 -p 443
What action do you want to perform?
- A. Port scanning.
- B. Using it as a proxy server.
- C. Updating Nikto.
- D. Seting Nikto for network sniffing.
Answer: A
NEW QUESTION 96
Which of the following tools is an automated tool that is used to implement SQL injections and to retrieve data from Web server databases?
- A. Fragroute
- B. Stick
- C. ADMutate
- D. Absinthe
Answer: D
Explanation:
Section: Volume B
NEW QUESTION 97
......
Pass Your GIAC Exam with GPEN Exam Dumps: https://www.actual4dump.com/GIAC/GPEN-actualtests-dumps.html
GPEN Exam Dumps PDF Updated Dump from Actual4dump Guaranteed Success: https://drive.google.com/open?id=1yGcGAj-GcEA339DU6pxqNzs8UffJFN2a