GPEN Practice Test

GPEN Practice Test practice questions, page 6 of 16, with answer review and explanations.

Question 26

You are done pen testing a Windows system and need to clean up some of the changes you have made. You created an account pentester on the system, what command would you use to delete that account?

  1. Net user pentester /del
  2. Net name pentester /del
  3. Net localuser pentester /del
  4. Net account pentester /del

Question 27

Your company has decided that the risk of performing a penetration test Is too great. You would like to figure out other ways to find vulnerabilities on their systems, which of the following is MOST likely to be a valid alternative?

  1. Network scope Analysis
  2. Baseline Data Reviews
  3. Patch Policy Review
  4. Configuration Reviews

Question 28

Analyze the command output below, what action is being performed by the tester?

  1. Displaying a Windows SAM database
  2. Listing available workgroup services
  3. Discovering valid user accounts
  4. Querying locked out user accounts

Question 29

Raw netcat shells and telnet terminals share which characteristic?

  1. Ability to send commands to a target machine.
  2. Ability to adapt output to the size of display window
  3. Shells and terminals are exactly the same.
  4. Ability to process standard output control sequences.

Question 30

How can a non-privileged user on a Unix system determine if shadow passwords are being used?

  1. Read /etc/password and look for "x" or "II" in the second colon-delimited field
  2. Read /etc/shadow and look for "x" or "II" in the second colon-delimited field
  3. Verify that /etc/password has been replaced with /etc/shadow
  4. Read /etc/shadow and look NULL values In the second comma delimited field