GPEN Practice Test

GPEN Practice Test practice questions, page 8 of 16, with answer review and explanations.

Question 36

Which of the following is the feature that separates the use of Rainbow Tables from other applications such as Cain or John the Ripper?

  1. Salts are used to create massive password databases for comparison.
  2. Applications take advantage of 64-bit CPU processor and multithread the crackingprocess.
  3. Data Is aligned efficiently in the rainbow tables making the search process quicker
  4. Raw hashed passwords are compared to pre-calculated hash tables.

Question 37

You suspect that system administrators In one part of the target organization are turning off their systems during the times when penetration tests are scheduled, what feature could you add to the ' Rules of engagement' that could help your team test that part of the target organization?

  1. Un announced test
  2. Tell response personnel the exact lime the test will occur
  3. Test systems after normal business hours
  4. Limit tests to business hours

Question 38

You are conducting a penetration test for a private contractor located in Singapore. The scope extends to all internal hosts controlled by the company, you have gathered necessary hold-harmless and nondisclosure agreements. Which action by your group can incur criminal liability under Chapter 50a, Computer Misuse Act?

  1. Exploiting vulnerable web services on internal hosts
  2. Attempts at social engineering employees via telephone calls
  3. Testing denial-of-service tolerance of the communications provider
  4. Cracking password hashes on the corporate domain server

Question 39

Which of the following is a WEP weakness that makes it easy to Inject arbitrary clear text packets onto a WEP network?

  1. Reversible hashes use for IVs
  2. Cryptographically weak CRC32 checksum
  3. RC4 algorithm
  4. Small key space

Question 40

During a penetration test we determine that TCP port 22 is listening on a target host. Knowing that SSHD is the typical service that listens on that port we attempt to validate that assumption with an SSH client but our effort Is unsuccessful. It turns out that it is actually an Apache webserver listening on the port, which type of scan would have helped us to determine what service was listening on port 22?

  1. Version scanning
  2. Port scanning
  3. Network sweeping
  4. OS fingerprinting