GPEN Practice Test

Review 385 GPEN practice questions with answer explanations and community insights.

Question 1

ACME corporation has decided to setup wireless (IEEE 802.11) network in it's sales branch at Tokyo and found that channels 1, 6, 9,11 are in use by the neighboring offices. Which is the best channel they can use?

  1. 4
  2. 5
  3. 10
  4. 2

Question 2

Which Metasploitvncinject stager will allow VNC communications from the attacker to a listening port of the attacker's choosing on the victim machine?

  1. Vncinject/find.lag
  2. Vncinject/reverse.tcp
  3. Vncinject/reverse-http
  4. Vncinject /bind.tcp

Question 3

What is the MOST important document to obtain before beginning any penetration testing?

  1. Project plan
  2. Exceptions document
  3. Project contact list
  4. A written statement of permission

Question 4

While reviewing traffic from a tcpdump capture, you notice the following commands being sent from a remote system to one of your web servers: C:\>sc winternet.host.com create ncservicebinpath- "c:\tools\ncexe -I -p 2222 -e cmd.exe" C:\>sc vJnternet.host.com query ncservice. What is the intent of the commands?

  1. The first command creates a backdoor shell as a service. It is being started on TCP2222 using cmd.exe. The second command verifies the service is created and itsstatus.
  2. The first command creates a backdoor shell as a service. It is being started on UDP2222 using cmd.exe. The second command verifies the service is created and itsstatus.
  3. This creates a service called ncservice which is linked to the cmd.exe command andits designed to stop any instance of nc.exe being run. The second command verifiesthe service is created and its status.
  4. The first command verifies the service is created and its status. The secondcommand creates a backdoor shell as a service. It is being started on TCP

Question 5

Which of the following best describes a client side exploit?

  1. Attack of a client application that retrieves content from the network
  2. Attack that escalates user privileged to root or administrator
  3. Attack of a service listening on a client system
  4. Attack on the physical machine