GIAC GIAC Information Security GPEN Questions & Answers

• Question 31:

  You want to search Microsoft Outlook Web Access Default Portal using Google search on the

  Internet so that you can perform the brute force attack and get unauthorized access. What search string will you use to accomplish the task?

  A. intitle:index.of inbox dbx

  B. intext:"outlook.asp"

  C. allinurl:"exchange/logon.asp"

  D. intitle:"Index Of" -inurl:maillog maillog size

  Correct Answer: C

• Question 32:

  Which of the following standards is used in wireless local area networks (WLANs)?

  A. IEEE 802.11b

  B. IEEE 802.5

  C. IEEE 802.3

  D. IEEE 802.4

  Correct Answer: A

• Question 33:

  You want to search Microsoft Outlook Web Access Default Portal using Google search on the

  Internet so that you can perform the brute force attack and get unauthorized access. What search string will you use to accomplish the task?

  A. intitle:index.of inbox dbx

  B. intext:"outlook.asp"

  C. allinurl:"exchange/logon.asp"

  D. intitle:"Index Of" -inurl:maillog maillog size

  Correct Answer: C

• Question 34:

  John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He is using a tool to crack the wireless encryption keys. The description of the tool is as follows:

  

  Which of the following tools is John using to crack the wireless encryption keys?

  A. Cain

  B. Kismet

  C. AirSnort

  D. PsPasswd

  Correct Answer: C

• Question 35:

  LM hash is one of the password schemes that Microsoft LAN Manager and Microsoft Windows versions prior to the Windows Vista use to store user passwords that are less than 15 characters long. If you provide a password seven characters or less, the second half of the LM hash is always __________.

  A. 0xAAD3B435B51404EE

  B. 0xBBD3B435B51504FF

  C. 0xBBC3C435C51504EF

  D. 0xAAD3B435B51404FF

  Correct Answer: A

• Question 36:

  You want to retrieve password files (stored in the Web server's index directory) from various Web sites. Which of the following tools can you use to accomplish the task?

  A. Sam spade

  B. Nmap

  C. Whois

  D. Google

  Correct Answer: D

• Question 37:

  You want to run the nmap command that includes the host specification of 202.176.56-57.*. How many hosts will you scan?

  A. 256

  B. 512

  C. 1024

  D. 64

  Correct Answer: B

• Question 38:

  Which of the following tools allow you to perform HTTP tunneling?

  Each correct answer represents a complete solution. Choose all that apply.

  A. BackStealth

  B. HTTPort

  C. Tunneled

  D. Nikto

  Correct Answer: ABC

• Question 39:

  How many bits encryption does SHA-1 use?

  A. 128

  B. 140

  C. 512

  D. 160

  Correct Answer: D

• Question 40:

  Which of the following penetration testing phases involves gathering data from whois, DNS, and network scanning, which helps in mapping a target network and provides valuable information regarding the operating system and applications running on the systems?

  A. Post-attack phase

  B. Attack phase

  C. On-attack phase

  D. Pre-attack phase

  Correct Answer: D