GPEN Practice Test

GPEN Practice Test practice questions, page 13 of 16, with answer review and explanations.

Question 61

What concept do Rainbow Tables use to speed up password cracking?

  1. Fast Lookup Crack Tables
  2. Memory Swap Trades
  3. Disk Recall Cracking
  4. Time-Memory Trade-off

Question 62

When sniffing wireless frames, the interface mode plays a key role in successfully collecting traffic. Which of the mode or modes are best used for sniffing wireless traffic?

  1. Master Ad-hoc
  2. RFMON
  3. RFMON. Ad-hoc
  4. Ad-hoc

Question 63

Given the following Scapy information, how is default Layer 2 information derived?

  1. The default layer 2 information is contained in a local scapy.cfg configuration fileon the local system.
  2. If not explicitly defined, the Ether type field value Is created using the hex value ofthe destination port, in this case 80
  3. If not explicitly defined, pseudo-random values are generated for the Layer 2 defaultinformation.
  4. Scapy relies on the underlying operating system to construct Layer 2 information touse as default.

Question 64

A customer has asked for a scan or vulnerable SSH servers. What is the penetration tester attempting to accomplish using the following Nmap command?

  1. Checking operating system version
  2. Running an exploit against the target
  3. Checking configuration
  4. Checking protocol version

Question 65

While performing an assessment on a banking site, you discover the following link: hnps://mybank.com/xfer.aspMer_toMaccount_number]&amount-[dollars] Assuming authenticated banking users can be lured to your web site, which crafted html tag may be used to launch a XSRF attack?

  1. <imgsrc-"java script alert (‘document cookie'):">
  2. <scripi>alert('hnps:/'mybank.com/xfer.a$p?xfer_io-[attacker_account]&amoutn-[dollars]')</script>
  3. <scripr>document.\write('hTtp$://mybankxom/xfer.a$p?xfer_to-[attacker.accountl &amount-[dollars)</script>
  4. <img src-'https/mybank.com/xfer.asp?xfer_to=[artacker_account]&amount= [dollars]">