GPEN sample questions

Question 1

Which of the following is the feature that separates the use of Rainbow Tables from other applications such as Cain or John the Ripper?

Accepted Answer

Applications take advantage of 64-bit CPU processor and multithread the crackingprocess.

Answer

Salts are used to create massive password databases for comparison.

Answer

Data Is aligned efficiently in the rainbow tables making the search process quicker

Answer

Raw hashed passwords are compared to pre-calculated hash tables.

Question 2

When attempting to crack a password using Rainbow Tables, what is the output of the reduction function?

Accepted Answer

A new potential hash

Answer

A new potential chain

Answer

A new potential table

Answer

A new potential password

Question 3

What will the following soapy commands do?

Accepted Answer

Perform a SYN-ACK scan against TCP ports 80 and 8080 for all hosts on the192.16S. 1.0/24 network.

Answer

Perform a SYN-ACK scan against TCP ports 80 and 3080 on host 192.168.1.24.

Answer

Perform a SYN scan against ports 80 through 8080 for all hosts on the192.168.1.0/24 network.

Answer

Combine the answered and unanswered results of a previous scan into the sr(packet)variable.

Question 4

John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He has successfully performed the following steps of the preattack phase to check the security of the We-are-secure network:

I Gathering information
I Determining the network range
I Identifying active systems

Now, he wants to find the open ports and applications running on the network. Which of the following tools will he use to accomplish his task?

Accepted Answer

SuperScan

Answer

APNIC

Answer

RIPE

Answer

ARIN

Question 5

Analyze the command output below, what action is being performed by the tester?

Accepted Answer

Discovering valid user accounts

Answer

Displaying a Windows SAM database

Answer

Listing available workgroup services

Answer

Querying locked out user accounts

Question 6

Which Metasploitvncinject stager will allow VNC communications from the attacker to a listening port of the attacker's choosing on the victim machine?

Accepted Answer

Vncinject/reverse.tcp

Answer

Vncinject/find.lag

Answer

Vncinject/reverse-http

Answer

Vncinject/bind.tcp

Question 7

Analyze the output of the two commands below: Which of the following can be factually inferred from the results of these commands?

Accepted Answer

The host 10.63.104.1 is not issuing ICMP packets.

Answer

The router 192.16S.U6.1 is filtering UDP traceroute.

Answer

The host 10.63.104.1 is silently dropping UDP packets.

Answer

The router 10 63.104 206 is dropping ICMP traceroute.

Question 8

What difference would you expect to result from running the following commands; (I). S dig ©ns domain.com target.com -t AXFR and (2). S dig ©ns.domain.comtarget.com -t IXFR=1002200301

Accepted Answer

Command (1) will display all information about a domain and command (2) willprovide only incremental updates from SOA 1002200301

Answer

Command (I) will display incremental information about a domain and command (2) will provide only 1002200301 bytes of information

Answer

Command (I) will display all information about a domain and command (2) willprovide only incremental updates up to SOA 1002200301

Answer

Command (I) will display all information about a domain and command (2) willprovide only 1002200301 bytes of information

Question 9

LM hash is one of the password schemes that Microsoft LAN Manager and Microsoft Windows versions prior to the Windows Vista use to store user passwords that are less than 15 characters long. If you provide a password seven characters or less, the second half of the LM hash is always _______.

Show answer & explanation

Correct answer: A

A

Accepted Answer

0xAAD3B435B51404EE

Answer

0xBBD3B435B51504FF

Answer

0xBBC3C435C51504EF

Answer

0xAAD3B435B51404FF

Question 10

You successfully compromise a target system's web application using blind command injection. The command you injected is ping-n 1 192.168.1.200. Assuming your machine is 192.168.1 200, which of the following would you see?

Show answer & explanation

Correct answer: D

D

Accepted Answer

An ICMP Echo packet on your sniffer containing the source address of the target

Answer

Ping-n 1 192.168.1 200 on the compromised system

Answer

A 'Destination host unreachable' error message on the compromised system

Answer

A packet containing 'Packets: Sent -1 Received = 1, Loss = 0 (0% loss) on yoursniffer

GIAC Penetration Tester Free Sample Questions

Lifetime One

Two

Pro Four

Premium Twelve

GPEN Sample Questions

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Trusted by professionals at