GPEN Exam Info and Free Practice Test Professional Quiz Study Materials [Q128-Q146]

QUESTION 128
When DNS is being used for load balancing, why would a penetration tester choose to identify a scan target by its IP address rather than its host name?

QUESTION 129
Which of the following tools is an automated tool that is used to implement SQL injections and to retrieve data from Web server databases?

QUESTION 130
LM hash is one of the password schemes that Microsoft LAN Manager and Microsoft Windows versions prior to the Windows Vista use to store user passwords that are less than 15 characters long. If you provide a password seven characters or less, the second half of the LM hash is always
__________.

QUESTION 131
CORRECT TEXT
Fill in the blank with the appropriate word.
In ______________ , an attacker sends a crafted packet with a TTL value that is set to expire one hop past the firewall.

QUESTION 132
You have compromised a Windows workstation using Metasploit and have injected the Meterpreter payload into the smss process. You want to dump the SAM database of the remote system so you can crack it offline.
Which Meterpreter module would you need to load in addition to the defaults so that you can accomplish this?

QUESTION 133
Which of the following tools can be used to perform Windows password cracking, Windows enumeration, and VoIP session sniffing?

QUESTION 134
Victor works as a professional Ethical Hacker for SecureEnet Inc. He wants to scan the wireless network of the company. He uses a tool that is a free open-source utility for network exploration.
The tool uses raw IP packets to determine the following:
What ports are open on our network systems.
What hosts are available on the network.
Identify unauthorized wireless access points.
What services (application name and version) those hosts are offering.
What operating systems (and OS versions) they are running.
What type of packet filters/firewalls are in use.
Which of the following tools is Victor using?

QUESTION 135
In the screen shot below, which selections would you need click in order to intercept and alter all http traffic passing through OWASP ZAP?

QUESTION 136
How many bits encryption does SHA-1 use?

QUESTION 137
What difference would you expect to result from running the following commands; (I). S dig __s domain.com target.com -t AXFR and (2). S dig __s.domain.com target.com -t IXFR=1002200301

QUESTION 138
Which of the following can be the countermeasures to prevent NetBIOS NULL session enumeration in Windows 2000 operating systems?
Each correct answer represents a complete solution. Choose all that apply.

QUESTION 139
All of the following are advantages of using the Metasploitpriv module for dumping hashes from a local Windows machine EXCEPT:

QUESTION 140
What happens when you scan a broadcast IP address of a network?
Each correct answer represents a complete solution. Choose all that apply.

QUESTION 141
Which of the following file transfer programs will automatically convert end-of line characters between different platforms when placed in ASCII Mode?

QUESTION 142
Which of the following TCP flags shows that the system is forwarding the buffered data?

QUESTION 143
How many bits does SYSKEY use for encryption?

QUESTION 144
John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He is using a tool to crack the wireless encryption keys. The description of the tool is as follows:

Which of the following tools is John using to crack the wireless encryption keys?

QUESTION 145
You work as a Network Administrator in the Secure Inc. You often need to send PDF documents that contain secret information, such as, client password, their credit card details, email passwords, etc. through email to your customers. However, you are making PDFs password protected you are getting complaints from customers that their secret information is being misused. When you analyze this complaint you get that however you are applying the passwords on PDFs, they are not providing the maximum protection. What may be the cause of this security hole?

QUESTION 146
What is the purpose of die following command:
nc.exe -I -p 2222 -e cmd.exe