GPEN Practice Test

GPEN Practice Test practice questions, page 3 of 16, with answer review and explanations.

Question 11

You are pen testing a Windows system remotely via a raw netcat shell. You want to quickly change directories to where the Windows operating system resides, what command could you use?

  1. cd systemroot
  2. cd-
  3. cd /systemroot/
  4. cd %systemroot%

Question 12

A client with 7200 employees in 14 cities (all connected via high speed WAN connections) has suffered a major external security breach via a desktop which cost them more than SI 72.000 and the loss of a high profile client. They ask you to perform a desktop vulnerability assessment to identify everything that needs to be patched. Using Nessus you find tens of thousands of vulnerabilities that need to be patched. In the report you find workstations running several Windows OS versions and service pack levels, anti-virus software from multiple vendors several major browser versions and different versions of Acrobat Reader. Which of the following recommendations should you provide with the report?

  1. The client should standardize their desktop software
  2. The client should eliminate workstations to reduce workload
  3. The client should hire more people to catch up on patches
  4. The client should perform monthly vulnerability assessments

Question 13

Which Metasploit payload includes simple upload and download functionality for moving files to and from compromised systems?

  1. DLL inject
  2. Upexec
  3. Meterpreter
  4. Vncinject

Question 14

A junior penetration tester at your firm is using a non-transparent proxy for the first time to test a web server. He sees the web site In his browser but nothing shows up In the proxy. He tells you that he just installed the non-transparent proxy on his computer and didn't change any defaults. After verifying the proxy is running, you ask him to open up his browser configuration, as shown in the figure, which of the following recommendations will correctly allow him to use the transparent proxy with his browser?

  1. He should change the PORT: value to match the port used by the non-transparentproxy.
  2. He should select the checkbox "use this proxy server for all protocols" for theproxy to function correctly.
  3. He should change the HTTP PROXY value to 127.0.0.1 since the non-transparentproxy is running on the same machine as the browser.
  4. He should select NO PROXY instead of MANUAL PROXY CONFIGURATION as thissetting is only necessary to access the Internet behind protected

Question 15

Which of the following describe the benefits to a pass-the-hash attack over traditional password cracking?

  1. No triggering of IDS signatures from the attack privileges at the level of theacquired password hash and no corruption of the LSASS process.
  2. No triggering of IDS signatures from the attack, no account lockout and use ofnative windows file and print sharing tools on the compromised system.
  3. No account lockout, privileges at the level of the acquired password hash and useof native windows file and print Sharif tools on the compromised system.
  4. No account lockout, use of native file and print sharing tools on the compromisedsystem and no corruption of the LSASS process.