GPEN Practice Test

GPEN Practice Test practice questions, page 14 of 16, with answer review and explanations.

Question 66

You are conducting a penetration test for a private company located in the UK. The scope extends to all internal and external hosts controlled by the company. You have gathered necessary hold-harmless and non-disclosure agreements. Which action by your group can incur criminal liability under the computer Misuse Act of 1990?

  1. Sending crafted packets to internal hosts in an attempt to fingerprint the operatingsystems
  2. Recovering the SAM database of the domain server and attempting to crackpasswords
  3. Installing a password sniffing program on an employee's personal computer withoutconsent
  4. Scanning open ports on internal user workstations and exploiting vulnerableapplications

Question 67

While performing a code audit, you discover a SQL injection vulnerability assuming the following vulnerable query, what user input could be injected to make the query true and return data? select * from widgets where name = '[user-input]';

  1. 'or 1=1
  2. ‘or l=l…
  3. 'or 1=1--
  4. ‘or l=1’

Question 68

You have compromised a Windows XP system and Injected the Meterpreter payload into the lsass process. While looking over the system you notice that there is a popular password management program on the system. When you attempt to access the file that contains the password you find it is locked. Further investigation reveals that it is locked by the passmgr process. How can you use the Meterpreter to get access to this file?

  1. Use the getuid command to determine the user context the process is runningunder, then use the imp command to impersonate that user.
  2. use the getpid command to determine the user context the process is runningunder, then use the Imp command to impersonate that user.
  3. Use the execute command to the passmgr executable. That will give you access to the file.
  4. Use the migrate command to jump to the passmgr process. That will give you accessto the file.

Question 69

When attempting to crack a password using Rainbow Tables, what is the output of the reduction function?

  1. A new potential chain
  2. A new potential table
  3. A new potential password
  4. A new potential hash

Question 70

You are performing a vulnerability assessment using Nessus and your clients printers begin printing pages of random text and showing error messages. The client is not happy with the situation. What is the best way to proceed?

  1. Enable the "Skip all primers" option and re-scan
  2. Ensure Safe Checks is enabled in Nessus scan policies
  3. Remove primer IP addresses from your target list
  4. Verify primers are in scope and tell the client In progress scans cannot be stopped