GPEN Practice Test

GPEN Practice Test practice questions, page 12 of 16, with answer review and explanations.

Question 56

All of the following are advantages of using the Metasploitpriv module for dumping hashes from a local Windows machine EXCEPT:

  1. Doesn't require SMB or NetBIOS access to the target machine
  2. Can run inside of a process owned by any user
  3. Provides less evidence for forensics Investigators to recover
  4. LSASS related reboot problems aren't an Issue

Question 57

What command will correctly reformat the Unix passwordcopy and shadowcopy Tiles for input to John The Ripper?

  1. /Un shadow passwd copy shadowcopy > johnfile
  2. /Unshadow passwdcopy shadowcopy > johnfile
  3. /Unshadow shadowcopy passwdcopy >john file
  4. /Unshadow passwdcopy shadowcopy > johnfile

Question 58

Which of the following best explains why you would warn to clear browser slate (history. cache, and cookies) between examinations of web servers when you've been trapping and altering values with a non-transparent proxy?

  1. Values trapped and stored in the browser will reveal the techniques you've used toexamine the web servers.
  2. Trapping and changing response values is beneficial for web site testing but usingthe same cached values in your browser will prevent you from being able to changethose values.
  3. Trapping and changing response values is beneficial for web site testing but willcause browser instability if not cleared.
  4. Values trapped and changed in the proxy, such as a cookie, will be stored by thebrowser and may impact further testing.

Question 59

You are performing a wireless penetration lest and are currently looking for rogue access points in one of their large facilities. You need to select an antenna that you can setup in a building and monitor the area for several days to see if any access points are turned on during the duration of the test. What type of antenna will you be selecting for this task?

  1. High gain and Omni-Directional
  2. High gain and Directional
  3. Low gain and Omni-Directional
  4. Low gain and Directional

Question 60

Analyze the command output below. What information can the tester infer directly from the information shown?

  1. The administrator account has no password
  2. Null sessions are enabled on the target
  3. The target host is running Linux with Samba services
  4. Account lockouts must be reset by the Administrator