GIAC Certified Penetration Tester - GPEN Free Exam Questions

QUESTION NO: 1
Which of the following Web attacks is performed by manipulating codes of programming languages such as SQL, Perl, Java present in the Web pages?

Correct Answer: A Vote an answer
QUESTION NO: 2
You are concerned about war driving bringing hackers attention to your wireless network. What is the most basic step you can take to mitigate this risk?

Correct Answer: A Vote an answer
QUESTION NO: 3
Joseph works as a Network Administrator for WebTech Inc. He has to set up a centralized area on the network so that each employee can share resources and documents with one another.
Which of the following will he configure to accomplish the task?

Correct Answer: A Vote an answer
QUESTION NO: 4
Which of the following syntaxes is the correct syntax for the master.dbo.sp_makewebtask procedure?

Correct Answer: B Vote an answer
QUESTION NO: 5
You have been contracted to penetration test an e-mail server for a client that wants to know for sure if the sendmail service is vulnerable to any known attacks. You have permission to run any type of test, how will you proceed to give the client the most valid answer?

Correct Answer: D Vote an answer
QUESTION NO: 6
Which of the following TCP packet sequences are common during a SYN (or half-open) scan?
(a) The source computer sends SYN and the destination computer responds with RST (b) The source computer sends SYN-ACK and no response Is received from the destination computer (c) The source computer sends SYN and no response is received from the destination computer (d) The source computer sends SYN-ACK and the destination computer responds with RST-ACK

Correct Answer: D Vote an answer
QUESTION NO: 7
Which of the following commands can be used for port scanning?

Correct Answer: D Vote an answer
QUESTION NO: 8
How can web server logs be leveraged to perform Cross-Site Scripting (XSSI?

Correct Answer: C Vote an answer
QUESTION NO: 9
You've been asked to test a non-transparent proxy lo make sure it is working. After confirming the browser is correctly pointed at the proxy, you try to browse a web site. The browser indicates it is
"loading" but never displays any part the page. Checking the proxy, you see a valid request in the proxy from your browser. Checking the response to the proxy, you see the results displayed in the accompanying screenshot. Which of the following answers is the most likely reason the browser hasn't displayed the page yet?

Correct Answer: C Vote an answer
QUESTION NO: 10
Which of the following enables an inventor to legally enforce his right to exclude others from using his invention?

Correct Answer: B Vote an answer
QUESTION NO: 11
John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He has successfully performed the following steps of the preattack phase to check the security of the We-are-secure network:
Gathering information
Determining the network range
Identifying active systems
Now, he wants to find the open ports and applications running on the network. Which of the following tools will he use to accomplish his task?

Correct Answer: C Vote an answer
QUESTION NO: 12
You are performing a wireless penetration lest and are currently looking for rogue access points in one of their large facilities. You need to select an antenna that you can setup in a building and monitor the area for several days to see if any access points are turned on during the duration of the test. What type of antenna will you be selecting for this task?

Correct Answer: C Vote an answer
QUESTION NO: 13
You work as a Computer Hacking Forensic Investigator for SecureNet Inc. You want to investigate Cross-Site Scripting attack on your company's Website. Which of the following methods of investigation can you use to accomplish the task?
Each correct answer represents a complete solution. Choose all that apply.

Correct Answer: A,B,C Vote an answer

QUALITY AND VALUE

Actual4test Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.

Tested and Approved

We are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.

Easy to Pass

If you prepare for the exams using our Actual4test testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.

Try Before Buy

Actual4test offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.