GPEN Practice Test

GPEN Practice Test practice questions, page 5 of 16, with answer review and explanations.

Question 21

You are running a vulnerability scan on a remote network and the traffic Is not making It to the target system. You investigate the connection issue and determine that the traffic is making it to the internal interface of your network firewall, but not making. It to the external Interface or to any systems outside your firewall. What is the most likely problem?

  1. Your network firewall is blocking the traffic
  2. The NAT or pat tables on your network based firewall are filling up and droppingthe traffic
  3. A host based firewall is blocking the traffic
  4. Your ISP Is blocking the traffic

Question 22

Identify the network activity shown below;

  1. A sweep of available hosts on the local subnet
  2. A flood of the local switch's CAM table.
  3. An attempt to disassociate wireless clients.
  4. An attempt to impersonate the local gateway

Question 23

You have compromised a Windows workstation using Metasploit and have injected the Meterpreter payload into the svchost process. After modifying some files to set up a persistent backdoor you realize that you will need to change the modified and access times of the files to ensure that the administrator can't see the changes you made. Which Meterpreter module would you need to load in order to do this?

  1. Core
  2. Priv
  3. Stdapi
  4. Browser

Question 24

How can web server logs be leveraged to perform Cross-Site Scripting (XSSI?

  1. Web logs containing XSS may execute shell scripts when opened In a GUI textbrowser
  2. XSS attacks cause web logs to become unreadable and therefore are an effective DOS attack.
  3. If web logs are viewed in a web-based console, log entries containing XSS mayexecute on the browser.
  4. When web logs are viewed in a terminal. XSS can escape to the shell and executecommands.

Question 25

What is the impact on pre-calculated Rainbow Tables of adding multiple salts to a set of passwords?

  1. Salts increases the time to crack the original password by increasing the number oftables that must be calculated.
  2. Salts double the total size of a rainbow table database.
  3. Salts can be reversed or removed from encoding quickly to produce unsaltedhashes.
  4. Salts have little effect because they can be calculated on the fly with applicationssuch as Ophcrack.