GPEN GIAC Exam Questions and Free Practice Test

Question 67

- (Topic 2)
Which of the following tools is an automated tool that is used to implement SQL injections and to retrieve data from Web server databases?

A. Fragroute

B. Absinthe

C. Stick

D. ADMutate

Correct Answer:B

Question 68

- (Topic 2)
Which of the following methods will free up bandwidth in a Wireless LAN (WLAN)?

A. Implement WE

B. Disabling SSID broadcas

C. Change hub with switc

D. Deploying a powerful antenn

Correct Answer:B

Question 69

- (Topic 1)
You are performing a vulnerability assessment using Nessus and your clients printers begin printing pages of random text and showing error messages. The client is not happy with the situation. What is the best way to proceed?

A. Enable the "Skip all primers" option and re-scan

B. Ensure Safe Checks is enabled in Nessus scan policies

C. Remove primer IP addresses from your target list

D. Verify primers are in scope and tell the client In progress scans cannot be stopped

Correct Answer:B

Question 70

- (Topic 1)
Identify the network activity shown below;
GPEN dumps exhibit

A. A sweep of available hosts on the local subnet

B. A flood of the local switch's CAM tabl

C. An attempt to disassociate wireless client

D. An attempt to impersonate the local gateway

Correct Answer:D

Question 71

- (Topic 2)
Analyze the screenshot below, which of the following sets of results will be retrieved using this search?
GPEN dumps exhibit

A. Pages from the domain sans.edu that have external link

B. Files of type .php from the domain sans.ed

C. Pages that contain the term ext:php and slte.sans.ed

D. Files of type .php that redirect to the sans.edu domai

Correct Answer:A

Question 72

- (Topic 1)
A penetration tester used a client-side browser exploit from metasploit to get an unprivileged shell prompt on the target Windows desktop. The penetration tester then tried using the getsystem command to perform a local privilege escalation which failed. Which of the following could resolve the problem?

A. Load priv module and try getsystem again

B. Run getuid command, then getpriv command, and try getsystem again

C. Run getuid command and try getsystem again

D. Use getprivs command instead of getsystem

Correct Answer:B

START GPEN EXAM