2023 Updated Verified GPEN Q&As - Pass Guarantee or Full Refund
[Dec-2023] GPEN Certification with Actual Questions from ActualTorrent
What is the duration, language, and format of GPEN Exam
Format: Multiple choices, multiple answers
- Number of Questions: 82-115
- Language: English
- Length of Examination: 3 hours
- Passing score: 74%
The GPEN exam is designed for cybersecurity professionals who have experience in the field and are looking to advance their careers by demonstrating their knowledge and skills. Candidates must have a minimum of two years of professional experience in the field of information security, along with a deep understanding of network security concepts, protocols, and tools.
GIAC GPEN certification is an excellent credential for anyone seeking a career in cybersecurity, especially as a penetration tester. It covers a comprehensive range of topics, and its hands-on approach makes it especially valuable. With the increasing frequency and sophistication of cyberattacks, the demand for penetration testers is on the rise, making GPEN certification a valuable investment in your career.
NEW QUESTION # 74
Which of the following scanning methods is most accurate and reliable, although it is easily detectable and hence avoided by a hacker?
- A. TCP FIN
- B. TCP SYN/ACK
- C. Xmas Tree
- D. TCP half-open
Answer: B
NEW QUESTION # 75
Which of the following worms performs random scanning?
- A. Klez
- B. BugBear
- C. SirCam
- D. Code red worm
Answer: D
Explanation:
Section: Volume D
Explanation/Reference:
NEW QUESTION # 76
Which of the following attacks allows an attacker to sniff data frames on a local area network (LAN) or stop the traffic altogether?
- A. Port scanning
- B. ARP spoofing
- C. Session hijacking
- D. Man-in-the-middle
Answer: B
NEW QUESTION # 77
You work as a Network Administrator for Tech Perfect Inc. The company has a Windows Active Directory- based single domain single forest network. The functional level of the forest is Windows Server 2003. You install access points for enabling a wireless network. The sales team members and the managers in the company will be using laptops to connect to the LAN through wireless connections. Therefore, you install WLAN network interface adapters on their laptops. However, you want to restrict the sales team members and managers from communicating directly to each other. Instead, they should communicate through the access points on the network. Which of the following topologies will you use to accomplish the task?
- A. Star
- B. Infrastructure
- C. Mesh
- D. Ad hoc
Answer: B
NEW QUESTION # 78
You have compromised a Windows XP system and Injected the Meterpreter payload into the lsass process.
While looking over the system you notice that there is a popular password management program on the system. When you attempt to access the file that contains the password you find it is locked. Further investigation reveals that it is locked by the passmgr process. How can you use the Meterpreter to get access to this file?
- A. Use the migrate command to jump to the passmgr process. That will give you accessto the file.
- B. use the getpid command to determine the user context the process is runningunder, then use the Imp command to impersonate that user.
- C. Use the getuid command to determine the user context the process is runningunder, then use the imp command to impersonate that user.
- D. Use the execute command to the passmgr executable. That will give you access to the file.
Answer: D
Explanation:
Section: Volume A
NEW QUESTION # 79
Fill in the blank with the appropriate act name.
The___ act gives consumers the right to ask emailers to stop spamming them.
Answer:
Explanation:
CAN-SPAM
NEW QUESTION # 80
Which of the following is a passive information gathering tool?
- A. Snort
- B. Ettercap
- C. Nmap
- D. Whois
Answer: D
Explanation:
Section: Volume B
Explanation/Reference:
NEW QUESTION # 81
Which of the following Penetration Testing steps includes network mapping and OS fingerprinting?
- A. Exploit
- B. Verify vulnerabilities
- C. Gather information
- D. Planning stage
Answer: C
NEW QUESTION # 82
Which of the following is possible in some SQL injection vulnerabilities on certain types of databases that affects the underlying server OS?
- A. Database structure retrieval
- B. Data manipulation
- C. Shell command execution
- D. Data query capabilities
Answer: A
Explanation:
Reference:
http://www.darkmoreops.com/2014/08/28/use-sqlmap-sql-injection-hack-website-database/
NEW QUESTION # 83
What does APNIC stand for?
- A. American Private Network Information Center
- B. Asia-Pacific Network Information Center
- C. Asian Private Network Information Center
- D. American-Pacific Network Information Center
Answer: B
Explanation:
Section: Volume D
NEW QUESTION # 84
Which of the following statements are true about firewalking?
Each correct answer represents a complete solution. Choose all that apply.
- A. Firewalking works on the UDP packets.
- B. To use firewalking, the attacker needs the IP address of the last known gateway before the firewall and the IP address of a host located behind the firewall.
- C. A malicious attacker can use firewalking to determine the types of ports/protocols that can bypass the firewall.
- D. In this technique, an attacker sends a crafted packet with a TTL value that is set to expire one hop past the firewall.
Answer: B,C,D
NEW QUESTION # 85
Which of the following are the countermeasures against WEP cracking?
Each correct answer represents a part of the solution. Choose all that apply.
- A. Changing keys often.
- B. Using the longest key supported by hardware.
- C. Using a 16 bit SSID.
- D. Using a non-obvious key.
Answer: A,B,D
NEW QUESTION # 86
John works as a professional Ethical Hacker. He has been assigned a project to test the security of www.we-are-secure.com. He successfully performs a brute force attack on the We-are-secure server. Now, he suggests some countermeasures to avoid such brute force attacks on the Wearesecure server. Which of the following are countermeasures against a brute force attack?
Each correct answer represents a complete solution. Choose all that apply.
- A. The site should increase the encryption key length of the password.
- B. The site should use CAPTCHA after a specific number of failed login attempts.
- C. The site should force its users to change their passwords from time to time.
- D. The site should restrict the number of login attempts to only three times.
Answer: B,D
NEW QUESTION # 87
Which of the following Trojans does not use TCP protocol?
- A. Beast
- B. Back Oriffice
- C. Donald Dick
- D. NetBus
Answer: B
NEW QUESTION # 88
Which Metasploit payload includes simple upload and download functionality for moving files to and from compromised systems?
- A. Meterpreter
- B. Upexec
- C. Vncinject
- D. DLL inject
Answer: C
Explanation:
Explanation/Reference:
Reference:
http://www.opensourceforu.com/2011/02/metasploit-meterpreter-payload/
NEW QUESTION # 89
Which of the following protocols uses a combination of public key and symmetric encryption to provide communication privacy, authentication, and message integrity for secure browsing on the Internet?
- A. SSL
- B. WEP
- C. MS-CHAP v2
- D. EFS
Answer: A
NEW QUESTION # 90
Which of the following modes describes a wireless interface that is configured to passively grab wireless frames from one wireless channel and pass them to the operating system?
- A. Master Mode
- B. Managed Mode
- C. Monitor Mode
- D. Promiscuous Mode
Answer: B
Explanation:
Explanation/Reference:
Reference:
http://www.willhackforsushi.com/books/377_eth_2e_06.pdf
NEW QUESTION # 91
You work as a Network Security Analyzer. You got a suspicious email while working on a forensic project.
Now, you want to know the IP address of the sender so that you can analyze various information such as the actual location, domain information, operating system being used, contact information, etc. of the email sender with the help of various tools and resources. You also want to check whether this email is fake or real. You know that analysis of email headers is a good starting point in such cases. The email header of the suspicious email is given below:
What is the IP address of the sender of this email?
- A. 209.191.91.180
- B. 172.16.10.90
- C. 216.168.54.25
- D. 141.1.1.1
Answer: C
NEW QUESTION # 92
John works as a professional Ethical Hacker. He is assigned a project to test the security of www.we-are-secure.com. You have searched all open ports of the we-are-secure server. Now, you want to perform the next information-gathering step, i.e., passive OS fingerprinting. Which of the following tools can you use to accomplish the task?
- A. Superscan
- B. Nmap
- C. P0f
- D. NBTscan
Answer: C
NEW QUESTION # 93
......
GPEN Real Valid Brain Dumps With 405 Questions: https://www.actualtorrent.com/GPEN-questions-answers.html
Updated GPEN Dumps PDF: https://drive.google.com/open?id=1TA6I2qHB8UwCb5EcHwG_-K8kmJSp9JhQ