[Apr-2024 Newly Released] GPEN Dumps for GIAC Information Security Certified [Q224-Q248]

GPEN GIAC

admin • April 22, 2024

[Apr-2024 Newly Released] GPEN Dumps for GIAC Information Security Certified [Q224-Q248]

4.3/5 - (7 votes)

[Apr-2024 Newly Released] GPEN Dumps for GIAC Information Security Certified

Updated Verified GPEN dumps Q&As – 100% Pass

The GIAC Certified Penetration Tester certification exam evaluates the participant’s ability to use and apply various methodologies and tools to simulate real-world attack scenarios to assess the overall security posture of a network. The comprehensive methodology outlined in the exam aims to replicate potential threats and vulnerabilities that organizations face on a daily basis. GPEN exam is continuously updated to keep up with the latest industry trends, making it a valuable and respected certification among security professionals.

GIAC Certified Penetration Tester Exam is designed for professionals who are interested in pursuing a career in cybersecurity or IT security. GPEN exam consists of 175 questions that are designed to test the candidate’s knowledge of the concepts, tools, and techniques used in penetration testing. GPEN exam is a practical and hands-on assessment that requires the candidate to demonstrate their ability to carry out penetration testing activities on a simulated network environment. Candidates who pass the exam are awarded the GIAC Certified Penetration Tester (GPEN) certification, which is recognized globally as a valuable credential in the field of cybersecurity.

NO.224 Network mapping provides a security testing team with a blueprint of the organization. Which of the following steps is NOT a part of manual network mapping?

Collecting employees information

Gathering private and public IP addresses

Performing Neotracerouting

Banner grabbing

Section: Volume C

NO.225 CORRECT TEXT
Fill in the blank with the appropriate word.
_______ is a utility that encrypts the hashed password information in a SAM database in a Windows system using a 128-bit encryption key.

SYSKEY

NO.226 The employees of EWS Inc. require remote access to the company’s Web servers. In order to provide solid wireless security, the company uses EAP-TLS as the authentication protocol. Which of the following statements are true about EAP-TLS?
Each correct answer represents a complete solution. Choose all that apply.

It is supported by all manufacturers of wireless LAN hardware and software.

It uses a public key certificate for server authentication.

It uses password hash for client authentication.

It provides a moderate level of security.

Section: Volume C

NO.227 Which of the following statements are true about KisMAC?

Data generated by KisMAC can also be saved in pcap format.

It cracks WEP and WPA keys by Rainbow attack or by dictionary attack.

It scans for networks passively on supported cards.

It is a wireless network discovery tool for Mac OS X.

NO.228 Which of the following password cracking tools can work on the Unix and Linux environment?

Brutus

Cain and Abel

Ophcrack

John the Ripper

NO.229 Which of the following is NOT an example of passive footprinting?

Scanning ports.

Analyzing job requirements.

Performing the whois query.

Querying the search engine.

NO.230 You want to obtain the Information of a Web server, whose IP address range comes in the IP address range used in Brazil. Which of the following registries can be used to get information about the Web server administers IP addresses, reverse DNS, etc?

ARIN

LACNIC

APNIC

RIPE NCC

NO.231 Which of the following vulnerability scanner scans from CGI, IDA, Unicode, and Nimda vulnerabilities?

Hackbot

SARA

Nessus

Cgichk

NO.232 Which of the following is generally practiced by the police or any other recognized governmental authority?

Spoofing

Wiretapping

Phishing

SMB signing

Section: Volume C

NO.233 Which of the following tools is based on the SATAN tool?

Retina

Internet scanner

GFI LANguard

SAINT

NO.234 You are conducting a penetration test for a private company located in the UK. The scope extends to all internal and external hosts controlled by the company. You have gathered necessary hold-harmless and non- disclosure agreements. Which action by your group can incur criminal liability under the computer Misuse Act of 1990?

Sending crafted packets to internal hosts in an attempt to fingerprint the operatingsystems

Recovering the SAM database of the domain server and attempting to crackpasswords

Installing a password sniffing program on an employee’s personal computer withoutconsent

Scanning open ports on internal user workstations and exploiting vulnerableapplications

Section: Volume A

NO.235 Which of the following tasks is NOT performed into the enumeration phase?

Discovering NetBIOS names

Obtaining Active Directory information and identifying vulnerable user accounts

Injecting a backdoor to the remote computer to gain access in it remotely

Establishing NULL sessions and queries

Section: Volume D

NO.236 You enter the following URL on your Web browser:
http://www.we-are-secure.com/scripts/..%co%af../..%co%
af../windows/system32/cmd.exe?/c+dir+c:
What task do you want to perform?

Perform buffer overflow attack.

Perform DDoS attack.

View the directory list of c drive.

Perform DoS attack.

NO.237 John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He is using a tool to crack the wireless encryption keys. The description of the tool is as follows:

Which of the following tools is John using to crack the wireless encryption keys?

Kismet

AirSnort

Cain

PsPasswd

NO.238 John works as a professional Ethical Hacker. He is assigned a project to test the security of www.we-are-secure.com. He enters a single quote in the input field of the login page of the Weare- secure Web site and receives the following error message:
Microsoft OLE DB Provider for ODBC Drivers error ‘0x80040E14’
This error message shows that the We-are-secure Website is vulnerable to __________.

A SQL injection attack

A Denial-of-Service attack

A buffer overflow

An XSS attack

NO.239 You configure a wireless router at your home. To secure your home Wireless LAN (WLAN), you implement WEP. Now you want to connect your client computer to the WLAN. Which of the following is the required information that you will need to configure the client computer?
Each correct answer represents a part of the solution. Choose two.

WEP key

MAC address of the router

IP address of the router

SSID of the WLAN

Section: Volume B

NO.240 Which of the following ports will you scan to search for SNMP enabled devices in the network?

151

161

123

163

NO.241 Which of the following tools uses exploits to break into remote operating systems?

Nessus

Metasploit framework

Nmap

John the Ripper

NO.242 You work as a Penetration Tester for the Infosec Inc. Your company takes the projects of security auditing.
Recently, your company has assigned you a project to test the security of the we-aresecure. com network.
Now, when you have finished your penetration testing, you find that the weare- secure.com server is highly vulnerable to SNMP enumeration. You advise the we-are-secure Inc. to turn off SNMP; however, this is not possible as the company is using various SNMP services on its remote nodes. What other step can you suggest to remove SNMP vulnerability?
Each correct answer represents a complete solution. Choose two.

Change the default community string names.

Install antivirus.

Close port TCP 53.

Upgrade SNMP Version 1 with the latest version.

Section: Volume C

NO.243 Which of the following is a Windows-based tool that is used for the detection of wireless LANs using the IEEE 802.11a, 802.11b, and 802.11g standards and also detects wireless networks marking their relative position with a GPS?

Kismet

NetStumbler

Ettercap

Tcpdump

NO.244 Which of the following statements are true about NTLMv1?
Each correct answer represents a complete solution. Choose all that apply.

It uses the LANMAN hash of the user’s password.

It is mostly used when no Active Directory domain exists.

It is a challenge-response authentication protocol.

It uses the MD5 hash of the user’s password.

Section: Volume B

NO.245 Which of the following tools is used for SNMP enumeration?

SARA

Userinfo

Getif

Enum

Section: Volume D

NO.246 Which of the following types of Penetration testing provides the testers with complete knowledge of the infrastructure to be tested?

White Box

Black Box

Grey Box

Water Fall

NO.247 You work as an IT Technician for uCertify Inc. You have to take security measures for the wireless network of the company. You want to prevent other computers from accessing the company’s wireless network. On the basis of the hardware address, which of the following will you use as the best possible method to accomplish the task?

MAC Filtering

SSID

RAS

WEP

Section: Volume C

NO.248 Which of the following password cracking tools can work on the Unix and Linux environment?

Brutus

Cain and Abel

Ophcrack

John the Ripper

Loading …