GPEN GIAC Exam Questions and Free Practice Test

Question 7

- (Topic 2)
What difference would you expect to result from running the following commands;
(I). S dig .ns domain.com target.com -t AXFR
and
(2). S dig .ns.domain.com target.com -t IXFR=1002200301

A. Command (I) will display incremental information about a domain and command (2) Will provide only 1002200301 bytes of information

B. Command (1) will display all information about a domain and command (2) willprovide only incremental updates from SOA 1002200301

C. Command (I) will display all information about a domain and command (2) willprovide only incremental updates up to SOA 1002200301

D. Command (I) will display all information about a domain and command (2) willprovide only 1002200301 bytes of information

Correct Answer:B

Question 8

- (Topic 2)
Which of the following statements are true about NTLMv1?
Each correct answer represents a complete solution. Choose all that apply.

A. It uses the LANMAN hash of the user's passwor

B. It is mostly used when no Active Directory domain exist

C. It is a challenge-response authentication protoco

D. It uses the MD5 hash of the user's passwor

Correct Answer:ABC

Question 9

- (Topic 1)
You've been contracted by the owner of a secure facility to try and break into their office in the middle of the night. Your client requested photographs of any sensitive information found as proof of your accomplishments. The job you've been hired to perform is an example of what practice?

A. Penetration Testing

B. Ethical Hacking

C. Vulnerability Assessing

D. Security Auditing

Correct Answer:B

Question 10

- (Topic 4)
Adam, a malicious hacker, hides a hacking tool from a system administrator of his company by using Alternate Data Streams (ADS) feature. Which of the following statements is true in context with the above scenario?

A. Adam is using NTFS file syste

B. Alternate Data Streams is a feature of Linux operating syste

C. Adam is using FAT file syste

D. Adam's system runs on Microsoft Windows 98 operating syste

Correct Answer:A

Question 11

- (Topic 4)
Which of the following tools is an example of HIDS?

A. Anti-Spector

B. Auditpol.exe

C. Elsave

D. Log File Monitor

Correct Answer:D

Question 12

- (Topic 1)
While scanning a remote system that is running a web server with a UDP scan and monitoring the scan with a sniffer, you notice that the target is responding with ICMP Port Unreachable only once a second What operating system is the target likely running?

A. Linux

B. Windows

C. OpenBSD

D. Mac OS X

Correct Answer:A

START GPEN EXAM