Ace GPEN Certification with 405 Actual Questions
PASS GIAC GPEN EXAM WITH UPDATED DUMPS
The GPEN certification exam is designed to test a candidate’s knowledge of the latest attack trends and techniques, as well as their understanding of emerging threats and vulnerabilities. This includes knowledge of the latest malware and exploits, as well as the ability to identify and respond to complex security incidents. Candidates are also required to demonstrate their understanding of security standards and frameworks, such as NIST, OWASP, and ISO, as well as the ability to apply them in real-world scenarios.
NEW QUESTION # 176
GSM uses either A5/1 or A5/2 stream cipher for ensuring over-the-air voice privacy. Which of the following cryptographic attacks can be used to break both ciphers?
- A. Man-in-the-middle attack
- B. Known plaintext attack
- C. Ciphertext only attack
- D. Replay attack
Answer: C
NEW QUESTION # 177
How can web server logs be leveraged to perform Cross-Site Scripting (XSSI?
- A. If web logs are viewed in a web-based console, log entries containing XSS mayexecute on the browser.
- B. Web logs containing XSS may execute shell scripts when opened In a GUI textbrowser
- C. XSS attacks cause web logs to become unreadable and therefore are an effective DOS attack.
- D. When web logs are viewed in a terminal. XSS can escape to the shell and executecommands.
Answer: A
NEW QUESTION # 178
How does OWASP ZAP function when used for performing web application assessments?
- A. It is a transparent proxy that sits between a target application and the backenddatabase.
- B. It is a non-transparent proxy that passively sniffs network traffic for HTTPvulnerabilities.
- C. It is a non-transparent proxy that sits between your web browser and the targetapplication.
- D. It is a transparent policy proxy that sits between Java servers and |SP web pages.
Answer: A
NEW QUESTION # 179
Which of the following tools can be used to automate the MITM attack?
- A. Kismet
- B. Airjack
- C. Hotspotter
- D. IKECrack
Answer: B
NEW QUESTION # 180
Adam works as a professional Computer Hacking Forensic Investigator. He wants to investigate a suspicious email that is sent using a Microsoft Exchange server. Which of the following files will he review to accomplish the task?
Each correct answer represents a part of the solution. Choose all that apply.
- A. cookie files
- B. EDB and STM database files
- C. Checkpoint files
- D. Temporary files
Answer: B,C,D
NEW QUESTION # 181
You work as a Network Administrator for Tech Perfect Inc. The company has a Windows Active Directory- based single domain single forest network. The functional level of the forest is Windows Server 2003. You install access points for enabling a wireless network. The sales team members and the managers in the company will be using laptops to connect to the LAN through wireless connections. Therefore, you install WLAN network interface adapters on their laptops. However, you want to restrict the sales team members and managers from communicating directly to each other. Instead, they should communicate through the access points on the network. Which of the following topologies will you use to accomplish the task?
- A. Star
- B. Ad hoc
- C. Infrastructure
- D. Mesh
Answer: C
Explanation:
Section: Volume C
NEW QUESTION # 182
Which of the following describes the direction of the challenges issued when establishing a wireless (IEEE 802.11) connection?
- A. One-way, the client challenges the access point
- B. One-way, the access point challenges the client
- C. Two-way, both the client and the access point challenge each other
- D. No challenges occur (or wireless connection
Answer: C
NEW QUESTION # 183
Which of the following is the correct sequence of packets to perform the 3-way handshake method?
- A. SYN, ACK, SYN/ACK
- B. SYN, SYN, ACK
- C. SYN, ACK, ACK
- D. SYN, SYN/ACK, ACK
Answer: D
NEW QUESTION # 184
Which of the following tools can be used to automate the MITM attack?
- A. Kismet
- B. Airjack
- C. Hotspotter
- D. IKECrack
Answer: B
NEW QUESTION # 185
Which of the following are considered Bluetooth security violations?
Each correct answer represents a complete solution. Choose two.
- A. SQL injection attack
- B. Cross site scripting attack
- C. Bluebug attack
- D. Bluesnarfing
- E. Social engineering
Answer: C,D
NEW QUESTION # 186
You want to search Microsoft Outlook Web Access Default Portal using Google search on the Internet so that you can perform the brute force attack and get unauthorized access. What search string will you use to accomplish the task?
- A. intitle:"Index Of" -inurl:maillog maillog size
- B. allinurl:"exchange/logon.asp"
- C. intext:"outlook.asp"
- D. intitle:index.of inbox dbx
Answer: B
NEW QUESTION # 187
Analyze the command output below. What information can the tester infer directly from the Information shown?
- A. Naming convention for public documents
- B. Usernames for the domain tesrdomain.com
- C. Directory indexing is allowed on the web server
- D. Vulnerable versions of Adobe software in use
Answer: A
NEW QUESTION # 188
What is the main difference between LAN MAN and NTLMv1 challenge/responses?
- A. NTLMv1 starts with the NT hash, whereas LANMAN starts with the LANMAN hash
- B. NTLMv1 splits the hash into 3 eight-byte pieces, whereas LAN MAN splits the hash Into 3 seven-byte pieces
- C. NTLMv1 only pads IS bytes, whereas LANMAN pads to 21 bytes
- D. NTLMv1utilizes DES, whereas LANMAN utilizes MD4
Answer: C
Explanation:
Section: Volume A
Explanation/Reference:
NEW QUESTION # 189
Which of the following tools can be used to automate the MITM attack?
- A. Kismet
- B. Airjack
- C. Hotspotter
- D. IKECrack
Answer: B
Explanation:
Section: Volume C
NEW QUESTION # 190
You want to use a Windows-based GUI tool which can perform MITM attacks, along with sniffing and ARP poisoning. Which of the following tools will you use?
- A. Brutus
- B. Nmap
- C. Dsniff
- D. Cain and Abel
Answer: D
NEW QUESTION # 191
You work as a Network Administrator for Tech Perfect Inc. The company has a Windows Active Directory-based single domain single forest network. The functional level of the forest is Windows Server 2003. The company has recently provided laptops to its sales team members. You have configured access points in the network to enable a wireless network. The company's security policy states that all users using laptops must use smart cards for authentication. Which of the following authentication techniques will you use to implement the security policy of the company?
- A. IEEE 802.1X using PEAP-MS-CHAP
- B. Open system
- C. IEEE 802.1X using EAP-TLS
- D. Pre-shared key
Answer: C
NEW QUESTION # 192
192.168.116.9 Is an IP address forvvww.scanned-server.com. Why are the results from the two scans, shown below, different?
- A. John.pot
- B. John.rec
- C. John.ini
- D. John conf
Answer: B
NEW QUESTION # 193
You work as a Penetration Tester for the Infosec Inc. Your company takes the projects of security auditing.
Recently, your company has assigned you a project to test the security of the we-aresecure. com Website. The we-are-secure.com Web server is using Linux operating system. When you port scanned the we-are- secure.com Web server, you got that TCP port 23, 25, and 53 are open. When you tried to telnet to port 23, you got a blank screen in response. When you tried to type the dir, copy, date, del, etc. commands you got only blank spaces or underscores symbols on the screen. What may be the reason of such unwanted situation?
- A. The telnet session is being affected by the stateful inspection firewall.
- B. The telnet service of we-are-secure.com has corrupted.
- C. The we-are-secure.com server is using a TCP wrapper.
- D. The we-are-secure.com server is using honeypot.
Answer: C
Explanation:
Section: Volume C
NEW QUESTION # 194
You want to scan your network quickly to detect live hosts by using ICMP ECHO Requests. What type of scanning will you perform to accomplish the task?
- A. Idle scan
- B. Ping sweep scan
- C. TCP SYN scan
- D. XMAS scan
Answer: B
NEW QUESTION # 195
You have detected what appears to be an unauthorized wireless access point on your network.
However this access point has the same MAC address as one of your real access points and is broadcasting with a stronger signal. What is this called?
- A. The evil twin attack
- B. DOS
- C. WAP cloning
- D. Buesnarfing
Answer: A
NEW QUESTION # 196
Which of the following tasks is NOT performed by antiviruses?
- A. Activity blocking
- B. Integrity scanning
- C. Session hijacking
- D. Heuristic scanning
Answer: C
Explanation:
Section: Volume D
Explanation/Reference:
NEW QUESTION # 197
Which of the following options holds the strongest password?
- A. california
- B. Joe12is23good
- C. Admin1234
- D. $#164aviD^%
Answer: D
NEW QUESTION # 198
Ryan wants to create an ad hoc wireless network so that he can share some important files with another employee of his company. Which of the following wireless security protocols should he choose for setting up an ad hoc wireless network?
Each correct answer represents a part of the solution. Choose two.
- A. WPA-PSK
- B. WPA2 -EAP
- C. WEP
- D. WPA-EAP
Answer: A,C
NEW QUESTION # 199
......
GIAC GPEN certified professionals are distinguished in their field, and obtaining this certification can open up new career opportunities. The GPEN exam holders stand out from their peers and have a competitive edge in the job market. GIAC Certified Penetration Tester certification also provides an opportunity to demonstrate expertise in penetration testing and the skills it requires. The GIAC GPEN certification is a valuable credential for IT and security professionals.
GPEN Questions PDF [2024] Use Valid New dump to Clear Exam: https://www.troytecdumps.com/GPEN-troytec-exam-dumps.html
Passing GIAC GPEN Exam Using 2024 Practice Tests: https://drive.google.com/open?id=1HiKGFOgwxq__E9iKl0Vl_BnWxvYo2NHx