GPEN Practice Test

GPEN Practice Test practice questions, page 2 of 16, with answer review and explanations.

Question 6

Which of the following TCP packet sequences are common during a SYN (or half-open) scan?

  1. A,B and C
  2. A and C
  3. C and D
  4. C and D

Question 7

Which of the following describes the direction of the challenges issued when establishing a wireless (IEEE 802.11) connection?

  1. One-way, the client challenges the access point
  2. One-way, the access point challenges the client
  3. No challenges occur (or wireless connection
  4. Two-way, both the client and the access point challenge each other

Question 8

You have gained shell on a Windows host and want to find other machines to pivot to, but the rules of engagement state that you can only use tools that are already available. How could you find other machines on the target network?

  1. Use the "ping" utility to automatically discover other hosts
  2. Use the "ping" utility in a for loop to sweep the network.
  3. Use the "edit" utility to read the target's HOSTS file.
  4. Use the "net share" utility to see who is connected to local shared drives.

Question 9

A penetration tester obtains telnet access to a target machine using a captured credential. While trying to transfer her exploit to the target machine, the network intrusion detection systems keeps detecting her exploit and terminating her connection. Which of the following actions will help the penetration tester transfer an exploit and compile it in the target system?

  1. Use the http service's PUT command to push the file onto the target machine.
  2. Use the scp service, protocol SSHv2 to pull the file onto the target machine.
  3. Use the telnet service's ECHO option to pull the file onto the target machine
  4. Use the ftp service in passive mode to push the file onto the target machine.

Question 10

What section of the penetration test or ethical hacking engagement final report is used to detail and prioritize the results of your testing?

  1. Methodology
  2. Conclusions
  3. Executive Summary
  4. Findings