GPEN Practice Test

GPEN Practice Test practice questions, page 4 of 16, with answer review and explanations.

Question 16

You are pen testing a Linux target from your windows-based attack platform. You just moved a script file from the windows system to the Linux target, but it will not execute properly. What is the most likely problem?

  1. The byte length is different on the two machines
  2. End of-line characters are different on the two machines
  3. The file must have become corrupt during transfer
  4. ASCII character sets are different on the two machines

Question 17

Which of the following is the JavaScript variable used to store a cookie?

  1. Browsercookie
  2. Windowcookie
  3. Document cookie
  4. Session cookie

Question 18

Analyze the command output below. Given this information, which is the appropriate next step for the tester? Starting Nmap4.53 (hnp://insecure.org I at2010-09-30 19:13 EDT interesting ports on 192.163.116.101: PORT STATE SERVICE - 130/tcp filtered cisco-fna 131/tcp filtered cisco-tna 132/tcp filtered cisco-sys 133/tcp filtered statsrv 134/tcp filtered Ingres-net 135/tcp filtered msrpc 136/tcp filtered profile 137/tcp filtered netbios-ns 138/tcp filtered netbios-dgm 139/tcp open netbios-ssn 140/tcp filtered emfis-data MAC Address: 00:30:1&:B8:14:8B (Shuttle) warning: OSS can results may be unreliable because we could not find at least l open and l closed port Device type, general purpose - Running: Microsoft Windows XP - OS details: Microsoft Windows XP SP2 Network Distance : 1 hop - Nmap done: I IP address (I host up) scanned in l .263 seconds

  1. Determine the MAC address of the scanned host.
  2. Send a single SYN packet to port 139/tcp on the host.
  3. Send spoofed packets to attempt to evade any firewall
  4. Request a list of shares from the scanned host.

Question 19

The resulting business impact, of the penetration test or ethical hacking engagement is explained in what section of the final report?

  1. Problems
  2. Findings
  3. Impact Assessment
  4. Executive Summary

Question 20

You have been contracted to map me network and try to compromise the servers for a client. Which of the following would be an example of scope creep' with respect to this penetration testing project?

  1. Disclosing information forbidden in the NDA
  2. Compromising a server then escalating privileges
  3. Being asked to compromise workstations
  4. Scanning network systems slowly so you are not detected