GPEN Practice Test

GPEN Practice Test practice questions, page 9 of 16, with answer review and explanations.

Question 41

Which type of Cross-Sire Scripting (XSS> vulnerability is hardest for automated testing tools to detect, and for what reason?

  1. Stored XSS. because it may be located anywhere within static or dynamic sitecontent
  2. Stored XSS. because it depends on emails and instant messaging systems.
  3. Reflected XSS. because It can only be found by analyzing web server responses.
  4. Reflected XSS: because it is difficult to find within large web server logs.

Question 42

You are using the Nmap Scripting Engine and want detailed output of the script as it runs. Which option do you include in the command string?

  1. Nmap --script-output -script-SSH-hostkey.nse 155.65.3.221 -p 22
  2. Nmap --script-trace --script-ssh-hostkey.nse 155.65.3.221 -p 22
  3. Nmap -script-verbose --scrlpr-ssh-hostkey.nse 155.65.3.221 -p 22
  4. Nmap -v --script=ssh-hostkey.nse 155.65.3.221 -p 22

Question 43

What is the purpose of the following command? C:\>wmic /node:[target IP] /user:[admin-user] /password:[password] process call create [command]

  1. Running a command on a remote Windows machine
  2. Creating a service on a remote Windows machine
  3. Creating an admin account on a remote Windows machine
  4. Listing the running processes on a remote windows machine

Question 44

Approximately how many packets are usually required to conduct a successful FMS attack onWEP?

  1. 250.000
  2. 20.000
  3. 10.000,000
  4. l (with a weak IV)

Question 45

What is the most likely cause of the responses on lines 10 and 11 of the output below?

  1. The device at hop 10 silently drops UDP packets with a high destination port.
  2. The device at hop 10 is down and not forwarding any requests at all.
  3. The host running the tracer utility lost its network connection during the scan
  4. The devices at hops 10 and II did not return an "ICMP TTL Exceeded in Transit" message.