GIAC 자격증 GPEN 시험덤프

GPEN인증시험은GIAC사의 인중시험입니다.GIAC인증사의 시험을 패스한다면 it업계에서의 대우는 달라집니다. 때문에 점점 많은 분들이GIAC인증GPEN시험을 응시합니다.하지만 실질적으로GPEN시험을 패스하시는 분들은 너무 적습니다.전분적인 지식을 터득하면서 완벽한 준비하고 응시하기에는 너무 많은 시간이 필요합니다.하지만 우리ITExamDump는 이러한 여러분의 시간을 절약해드립니다.

GPEN는GIAC의 인증시험입니다.GPEN인증시험을 패스하면GIAC인증과 한 발작 더 내디딘 것입니다. 때문에GPEN시험의 인기는 날마다 더해갑니다.GPEN시험에 응시하는 분들도 날마다 더 많아지고 있습니다. 하지만GPEN시험의 통과 율은 아주 낮습니다.GPEN인증시험준비중인 여러분은 어떤 자료를 준비하였나요?

우리ITExamDump 사이트에서GIAC GPEN관련자료의 일부 문제와 답 등 샘플을 제공함으로 여러분은 무료로 다운받아 체험해보실 수 있습니다.체험 후 우리의ITExamDump에 신뢰감을 느끼게 됩니다.빨리 우리 ITExamDump의 덤프를 만나보세요.

시험 번호/코드: GPEN

시험 이름: GIAC (GIAC Certified Penetration Tester)

GIAC인증 GPEN시험을 가장 빠른 시일내에 가장 쉬운 방법으로 패스하는 방법을 고심초사한끝에 ITExamDump에서 연구해 내었습니다. 그건 바로ITExamDump의GIAC인증 GPEN덤프로GIAC인증 GPEN시험에 대비하는것입니다. ITExamDump의GIAC인증 GPEN덤프품질을 검증하려면 구매사이트의 무료샘플을 체험해보시면 됩니다.자격증을 많이 취득하여 멋진 IT전문가로 되세요.

ITExamDump 에서 출시한GIAC인증GPEN 덤프는GIAC인증GPEN 실제시험의 출제범위와 출제유형을 대비하여 제작된 최신버전 덤프입니다. 시험문제가 바뀌면 제일 빠른 시일내에 덤프를 업데이트 하도록 최선을 다하고 있으며 1년 무료 업데이트서비스를 제공해드립니다. 1년 무료 업데이트서비스를 제공해드리기에 시험시간을 늦추어도 시험성적에 아무런 페를 끼치지 않습니다. ITExamDump에 믿음을 느낄수 있도록 구매사이트마다 무료샘플 다운가능기능을 설치하였습니다.무료샘플을 체험해보시고ITExamDump을 선택해주세요.

GPEN 덤프무료샘플다운로드하기: http://www.itexamdump.com/GPEN.html

NO.1 Which of the following tools is used to verify the network structure packets and confirm that the packets
are constructed according to specification?
A. EtherApe
B. Snort decoder
C. AirSnort
D. snort_inline
Answer: B

GIAC자료   GPEN인증   GPEN   GPEN최신덤프

NO.2 Which of the following are the limitations for the cross site request forgery (CSRF) attack?
Each correct answer represents a complete solution. Choose all that apply.
A. The target site should have limited lifetime authentication cookies.
B. The attacker must target a site that doesn't check the referrer header.
C. The target site should authenticate in GET and POST parameters, not only cookies.
D. The attacker must determine the right values for all the form inputs.
Answer: B,D

GIAC자격증   GPEN   GPEN dump   GPEN기출문제   GPEN

NO.3 Adam works on a Linux system. He is using Sendmail as the primary application to transmit emails.
Linux uses Syslog to maintain logs of what has occurred on the system. Which of the following log files
contains e-mail information such as source and destination IP addresses, date and time stamps etc?
A. /log/var/logd
B. /var/log/logmail
C. /log/var/mailog
D. /var/log/mailog
Answer: D

GIAC   GPEN   GPEN시험문제   GPEN

NO.4 Which of the following are the scanning methods used in penetration testing?
Each correct answer represents a complete solution. Choose all that apply.
A. Vulnerability
B. Port
C. Network
D. Services
Answer: A,B,C

GIAC   GPEN덤프   GPEN덤프   GPEN

NO.5 Which of the following tools can be used to read NetStumbler's collected data files and present street
maps showing the logged WAPs as icons, whose color and shape indicates WEP mode and signal
strength?
A. NetStumbler
B. StumbVerter
C. WEPcrack
D. Kismet
Answer: B

GIAC시험문제   GPEN시험문제   GPEN인증   GPEN최신덤프

NO.6 Which of the following attacks is a form of active eavesdropping in which the attacker makes
independent connections with the victims and relays messages between them, making them believe that
they are talking directly to each other over a private connection, when in fact the entire conversation is
controlled by the attacker?
A. DoS
B. Sniffing
C. Man-in-the-middle
D. Brute force
Answer: C

GIAC   GPEN기출문제   GPEN자료   GPEN자료   GPEN

NO.7 Which of the following is NOT an example of passive footprinting?
A. Scanning ports.
B. Analyzing job requirements.
C. Performing the whois query.
D. Querying the search engine.
Answer: A

GIAC덤프   GPEN자격증   GPEN최신덤프   GPEN자료

NO.8 Which of the following statements are true about WPA?
Each correct answer represents a complete solution. Choose all that apply.
A. WPA-PSK converts the passphrase into a 256-bit key.
B. WPA provides better security than WEP.
C. WPA-PSK requires a user to enter an 8-character to 63-character passphrase into a wireles s client.
D. Shared-key WPA is vulnerable to password cracking attacks if a weak passphrase is used.
Answer: A,B,C,D

GIAC기출문제   GPEN최신덤프   GPEN   GPEN인증   GPEN기출문제

NO.9 Which of the following statements are true about KisMAC?
A. Data generated by KisMAC can also be saved in pcap format.
B. It cracks WEP and WPA keys by Rainbow attack or by dictionary attack.
C. It scans for networks passively on supported cards.
D. It is a wireless network discovery tool for Mac OS X.
Answer: A,C,D

GIAC   GPEN   GPEN인증   GPEN

NO.10 Which of the following statements is true about the Digest Authentication scheme?
A. In this authentication scheme, the username and password are passed with every request, not just
when the user first types them.
B. A valid response from the client contains a checksum of the username, the password, the given
random value, the HTTP method, and the requested URL.
C. The password is sent over the network in clear text format.
D. It uses the base64 encoding encryption scheme.
Answer: B

GIAC   GPEN   GPEN기출문제   GPEN

NO.11 John works as a professional Ethical Hacker. He has been assigned a project to test the security of
www.we-are-secure.com. He copies the whole structure of the We-are-secure Web site to the local disk
and obtains all the files on the Web site. Which of the following techniques is he using to accomplish his
task?
A. TCP FTP proxy scanning
B. Eavesdropping
C. Web ripping
D. Fingerprinting
Answer: C

GIAC인증   GPEN기출문제   GPEN   GPEN

NO.12 Which of the following statements are true about SSIDs?
Each correct answer represents a complete solution. Choose all that apply.
A. SSIDs are case insensitive text strings and have a maximum length of 64 characters.
B. Configuring the same SSID as that of the other Wireless Access Points (WAPs) of other
networks will create a conflict.
C. SSID is used to identify a wireless network.
D. All wireless devices on a wireless network must have the same SSID in order to communicate with
each other.
Answer: B,C,D

GIAC시험문제   GPEN dump   GPEN

NO.13 An executive in your company reports odd behavior on her PDA. After investigation you discover that a
trusted device is actually copying data off the PDA. The executive tells you that the behavior started
shortly after accepting an e-business card from an unknown person. What type of attack is this?
A. Session Hijacking
B. PDA Hijacking
C. Privilege Escalation
D. Bluesnarfing
Answer: D

GIAC dumps   GPEN시험문제   GPEN   GPEN

NO.14 In which of the following scanning techniques does a scanner connect to an FTP server and request
that server to start data transfer to the third system?
A. Bounce attack scanning
B. Xmas Tree scanning
C. TCP FIN scanning
D. TCP SYN scanning
Answer: A

GIAC인증   GPEN   GPEN   GPEN인증

NO.15 Which of the following statements are true about MS-CHAPv2?
Each correct answer represents a complete solution. Choose all that apply.
A. It is a connectionless protocol.
B. It can be replaced with EAP-TLS as the authentication mechanism for PPTP.
C. It provides an authenticator-controlled password change mechanism.
D. It is subject to offline dictionary attacks.
Answer: B,C,D

GIAC   GPEN시험문제   GPEN   GPEN

NO.16 You want to integrate the Nikto tool with nessus vulnerability scanner. Which of the following steps will
you take to accomplish the task?
Each correct answer represents a complete solution. Choose two.
A. Restart nessusd service.
B. Place nikto.pl file in the /var/www directory.
C. Place nikto.pl file in the /etc/nessus directory.
D. Place the directory containing nikto.pl in root's PATH environment variable.
Answer: A,D

GIAC최신덤프   GPEN   GPEN   GPEN자료

NO.17 A Web developer with your company wants to have wireless access for contractors that come in to work
on various projects. The process of getting this approved takes time. So rather than wait, he has put his
own wireless router attached to one of the network ports in his department. What security risk does this
present?
A. An unauthorized WAP is one way for hackers to get into a network.
B. It is likely to increase network traffic and slow down network performance.
C. This circumvents network intrusion detection.
D. None, adding a wireless access point is a common task and not a security risk.
Answer: A

GIAC dump   GPEN자격증   GPEN dump

NO.18 You have inserted a Trojan on your friend's computer and you want to put it in the startup so that
whenever the computer reboots the Trojan will start to run on the startup. Which of the following registry
entries will you edit to accomplish the task?
A. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Start
B. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Auto
C. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Startup
D.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
Answer: D

GIAC   GPEN시험문제   GPEN

NO.19 You work as a Network Administrator for Infosec Inc. Nowadays, you are facing an unauthorized
access in your Wi-Fi network. Therefore, you analyze a log that has been recorded by your favorite sniffer,
Ethereal. You are able to discover the cause of the unauthorized access after noticing the following string
in the log file:
(Wlan.fc.type_subtype eq 32 and llc.oui eq 0x00601d and llc.pid eq 0x0001)
When you find All your 802.11b are belong to us as the payload string, you are convinced about which tool
is being used for the unauthorized access. Which of the following tools have you ascertained?
A. AirSnort
B. Kismet
C. AiroPeek
D. NetStumbler
Answer: D

GIAC   GPEN덤프   GPEN기출문제   GPEN   GPEN   GPEN

NO.20 Which of the following options holds the strongest password?
A. california
B. $#164aviD