GPEN Practice Test

GPEN Practice Test practice questions, page 7 of 16, with answer review and explanations.

Question 31

When DNS is being used for load balancing, why would a penetration tester choose to identify a scan target by its IP address rather than its host name?

  1. Asingle IP may have multiple domains.
  2. A single domain name can only have one IP address.
  3. Scanning tools only recognize IP addresses
  4. A single domain name may have multiple IP addresses.

Question 32

What problem occurs when executing the following command from within a netcat raw shell? sudo cat /etc/shadow

  1. Sudo does not work at all from a shell
  2. Sudo works fine if the user and command are both in the /etc/sudoers file
  3. The display blanks after typing the sudo command
  4. You will not be able to type the password at the password prompt

Question 33

You are pen testing a Windows system remotely via a raw netcat shell. You want to get a listing of all the local users in the administrators group, what command would you use?

  1. Net account administrators
  2. Net user administrators
  3. Net localgroup administrators
  4. Net localuser administrators

Question 34

Analyze the screenshot below. What type of vulnerability is being attacked?

  1. Windows Server service
  2. Internet Explorer
  3. Windows Powershell
  4. Local Security Authority

Question 35

You have compromised a Windows workstation using Metasploit and have injected the Meterpreter payload into the smss process. You want to dump the SAM database of the remote system so you can crack it offline. Which Meterpreter module would you need to load in addition to the defaults so that you can accomplish this?

  1. Core
  2. Priv
  3. Stdapi
  4. Hashdump