GIAC GPEN the latest exam questions and answers free download

With the arrival of the flood of the information age of the 21st century, people are constantly improve their knowledge to adapt to the times. But this is still not enough. In the IT industry, GIAC's GPEN exam certification is the essential certification of the IT industry. Because this exam is difficult, through it, you may be subject to international recognition and acceptance, and you will have a bright future and holding high pay attention. ITCertKing has the world's most reliable IT certification training materials, and with it you can achieve your wonderful plans. We guarantee you 100% certified. Candidates who participate in the GIAC GPEN certification exam, what are you still hesitant？Just do it quickly!

GIAC GPEN certification can guarantee you have good job prospects, because GIAC certification GPEN exam is a difficult test of IT knowledge, passing GIAC certification GPEN exam proves that your IT expertise a strong and you can be qualified for a good job.

Exam Code: GPEN
Exam Name: GIAC (GIAC Certified Penetration Tester)
One year free update, No help, Full refund!
Total Q&A: 384 Questions and Answers
Last Update: 2013-10-25

GIAC GPEN is a certification exam to test IT expertise and skills. If you find a job in the IT industry, many human resource managers in the interview will reference what GIAC related certification you have. If you have GIAC GPEN certification, apparently, it can improve your competitiveness.

In order to pass GIAC certification GPEN exam disposably, you must have a good preparation and a complete knowledge structure. ITCertKing can provide you the resources to meet your need.

GIAC certification GPEN exam is a rare examination opportunity to improve yourself and it is very valuable in the IT field. There are many IT professionals to participate in this exam. Passing GIAC certification GPEN exam can improve your IT skills. Our ITCertKing provide you practice questions about GIAC certification GPEN exam. ITCertKing's professional IT team will provide you with the latest training tools to help you realize their dreams earlier. ITCertKing have the best quality and the latest GIAC certification GPEN exam training materials and they can help you pass the GIAC certification GPEN exam successfully.

GPEN Free Demo Download: http://www.itcertking.com/GPEN_exam.html

NO.1 TCP FIN scanning is a type of stealth scanning through which the attacker sends a FIN packet to
the target port. If the port is closed, the victim assumes that this packet was sent mistakenly by the
attacker and sends the RST packet to the attacker. If the port is open, the FIN packet will be ignored
and the port will drop the packet. Which of the following operating systems can be easily identified
with the help of TCP FIN scanning?
A. Solaris
B. Red Hat
C. Windows
D. Knoppix
Answer: C

GIAC   GPEN   GPEN exam simulations

NO.2 John works as a professional Ethical Hacker. He has been assigned a project to test the security
of www.we-are-secure.com. He copies the whole structure of the We-are-secure Web site to the
local disk and obtains all the files on the Web site. Which of the following techniques is he using to
accomplish his task?
A. TCP FTP proxy scanning
B. Eavesdropping
C. Web ripping
D. Fingerprinting
Answer: C

GIAC   GPEN   GPEN

NO.3 Which of the following statements are true about WPA?
Each correct answer represents a complete solution. Choose all that apply.
A. WPA-PSK converts the passphrase into a 256-bit key.
B. WPA provides better security than WEP .
C. WPA-PSK requires a user to enter an 8-character to 63-character passphrase into a wireles s client.
D. Shared-key WPA is vulnerable to password cracking attacks if a weak passphrase is used.
Answer: A,B,C,D

GIAC   GPEN   GPEN exam simulations

NO.4 Which of the following is NOT an example of passive footprinting?
A. Scanning ports.
B. Analyzing job requirements.
C. Performing the whois query.
D. Querying the search engine.
Answer: A

GIAC exam simulations   GPEN   GPEN exam prep   GPEN braindump   GPEN

NO.5 Which of the following are the scanning methods used in penetration testing?
Each correct answer represents a complete solution. Choose all that apply.
A. Vulnerability
B. Port
C. Network
D. Services
Answer: A,B,C

GIAC exam dumps   GPEN exam   GPEN   GPEN study guide   GPEN

NO.6 Which of the following attacks allows an attacker to sniff data frames on a local area network
(LAN) or stop the traffic altogether?
A. Man-in-the-middle
B. ARP spoofing
C. Port scanning
D. Session hijacking
Answer: B

GIAC test questions   GPEN answers real questions   GPEN test questions

NO.7 You execute the following netcat command:
c:\target\nc -1 -p 53 -d -e cmd.exe
What action do you want to perform by issuing the above command?
A. Capture data on port 53 and performing banner grabbing.
B. Listen the incoming traffic on port 53 and execute the remote shell.
C. Listen the incoming data and performing port scanning.
D. Capture data on port 53 and delete the remote shell.
Answer: B

GIAC demo   GPEN   GPEN

NO.8 Adam works on a Linux system. He is using Sendmail as the primary application to transmit
emails.
Linux uses Syslog to maintain logs of what has occurred on the system. Which of the following log
files contains e-mail information such as source and destination IP addresses, date and time stamps
etc?
A. /log/var/logd
B. /var/log/logmail
C. /log/var/mailog
D. /var/log/mailog
Answer: D

GIAC   GPEN braindump   GPEN   GPEN

NO.9 You have inserted a Trojan on your friend's computer and you want to put it in the startup so
that whenever the computer reboots the Trojan will start to run on the startup. Which of the
following registry entries will you edit to accomplish the task?
A. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Start
B. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Auto
C. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Startup
D. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
Answer: D

GIAC   GPEN test questions   GPEN certification training   GPEN   GPEN

NO.10 Which of the following tools is used to verify the network structure packets and confirm that
the packets are constructed according to specification?
A. EtherApe
B. Snort decoder
C. AirSnort
D. snort_inline
Answer: B

GIAC original questions   GPEN   GPEN practice test   GPEN   GPEN test questions   GPEN

NO.11 Which of the following statements is true about the Digest Authentication scheme?
A. In this authentication scheme, the username and password are passed with every request, not
just when the user first types them.
B. A valid response from the client contains a checksum of the username, the password, the given
random value, the HTTP method, and the requested URL.
C. The password is sent over the network in clear text format.
D. It uses the base64 encoding encryption scheme.
Answer: B

GIAC   GPEN exam   GPEN study guide   GPEN certification training   GPEN

NO.12 Which of the following options holds the strongest password?
A. california
B. $#164aviD