IT-Tests.com GIAC GPEN exam practice questions and answers

No one wants to own insipid life. Do you want to at the negligible postion and share less wages forever? And do you want to wait to be laid off or waiting for the retirement? This life is too boring. Do not you want to make your life more interesting? It does not matter. Today, I tell you a shortcut to success. It is to pass the GIAC GPEN exam. With this certification, you can live the life of the high-level white-collar. You can become a power IT professionals, and get the respect from others. IT-Tests.com will provide you with excellent GIAC GPEN exam training materials, and allows you to achieve this dream effortlessly. Are you still hesitant? Do not hesitate, Add the IT-Tests.com's GIAC GPEN exam training materials to your shopping cart quickly.

IT-Tests.com is a website specifically provide the certification exam information sources for IT professionals. Through many reflects from people who have purchase IT-Tests's products, IT-Tests.com is proved to be the best website to provide the source of information about certification exam. The product of IT-Tests.com is a very reliable training tool for you. The answers of the exam exercises provided by IT-Tests.com is very accurate. Our IT-Tests's senior experts are continuing to enhance the quality of our training materials.

When you click into IT-Tests.com's site, you will see so many people daily enter the website. You can not help but be surprised. In fact, this is normal. IT-Tests.com is provide different training materials for alot of candidates. They are using our training materials tto pass the exam. This shows that our GIAC GPEN exam training materials can really play a role. If you want to buy, then do not miss IT-Tests.com website, you will be very satisfied.

From the view of specialized examination point, it is necessary to teach you tips about the exam. You need to outsmart, and do not give your future the chance of failure. IT-Tests.com is a great resource site. It includes GIAC GPEN Exam Materials, study materials and technical materials, as well as exam training and detailed explanation and answers. The website which provide exam information are surged in recent years. This may cause you clueless when you prepare the GIAC GPEN exam. IT-Tests.com's GIAC GPEN exam training materials are effective training materials that proven by professionals and the candidates who passed the exam. It can help you to pass the exam certification easily.

Now IT industry is more and more competitive. Passing GIAC GPEN exam certification can effectively help you entrench yourself and enhance your status in this competitive IT area. In our IT-Tests.com you can get the related GIAC GPEN exam certification training tools. Our IT-Tests.com IT experts team will timely provide you the accurate and detailed training materials about GIAC certification GPEN exam. Through the learning materials and exam practice questions and answers provided by IT-Tests, we can ensure you have a successful challenge when you are the first time to participate in the GIAC certification GPEN exam. Above all, using IT-Tests.com you do not spend a lot of time and effort to prepare for the exam.

Exam Code: GPEN

Exam Name: GIAC (GIAC Certified Penetration Tester)

Although there are other online GIAC GPEN exam training resources on the market, but the IT-Tests.com's GIAC GPEN exam training materials are the best. Because we will be updated regularly, and it's sure that we can always provide accurate GIAC GPEN exam training materials to you. In addition, IT-Tests.com's GIAC GPEN exam training materials provide a year of free updates, so that you will always get the latest GIAC GPEN exam training materials.

If you use the IT-Tests.com GIAC GPEN study materials, you can reduce the time and economic costs of the exam. It can help you to pass the exam successfully. Before you decide to buy our GIAC GPEN exam materials, you can download our free test questions, including the PDF version and the software version. If you need software versions please do not hesitate to obtain a copy from our customer service staff.

GPEN (GIAC Certified Penetration Tester) Free Demo Download: http://www.it-tests.com/GPEN.html

NO.1 Which of the following attacks allows an attacker to sniff data frames on a local area network (LAN) or
stop the traffic altogether?
A. Man-in-the-middle
B. ARP spoofing
C. Port scanning
D. Session hijacking
Answer: B

GIAC test questions   GPEN   GPEN exam prep   GPEN   GPEN certification training   GPEN study guide

NO.2 Which of the following encryption modes are possible in WEP?
Each correct answer represents a complete solution. Choose all that apply.
A. No encryption
B. 256 bit encryption
C. 128 bit encryption
D. 40 bit encryption
Answer: A,C,D

GIAC   GPEN exam prep   GPEN certification   GPEN answers real questions

NO.3 You execute the following netcat command:
c:\target\nc -1 -p 53 -d -e cmd.exe
What action do you want to perform by issuing the above command?
A. Capture data on port 53 and performing banner grabbing.
B. Listen the incoming traffic on port 53 and execute the remote shell.
C. Listen the incoming data and performing port scanning.
D. Capture data on port 53 and delete the remote shell.
Answer: B

GIAC study guide   GPEN test questions   GPEN questions   GPEN

NO.4 You want to integrate the Nikto tool with nessus vulnerability scanner. Which of the following steps will
you take to accomplish the task?
Each correct answer represents a complete solution. Choose two.
A. Restart nessusd service.
B. Place nikto.pl file in the /var/www directory.
C. Place nikto.pl file in the /etc/nessus directory.
D. Place the directory containing nikto.pl in root's PATH environment variable.
Answer: A,D

GIAC test answers   GPEN demo   GPEN

NO.5 A Web developer with your company wants to have wireless access for contractors that come in to work
on various projects. The process of getting this approved takes time. So rather than wait, he has put his
own wireless router attached to one of the network ports in his department. What security risk does this
present?
A. An unauthorized WAP is one way for hackers to get into a network.
B. It is likely to increase network traffic and slow down network performance.
C. This circumvents network intrusion detection.
D. None, adding a wireless access point is a common task and not a security risk.
Answer: A

GIAC exam dumps   GPEN demo   GPEN   GPEN exam simulations

NO.6 Which of the following statements are true about KisMAC?
A. Data generated by KisMAC can also be saved in pcap format.
B. It cracks WEP and WPA keys by Rainbow attack or by dictionary attack.
C. It scans for networks passively on supported cards.
D. It is a wireless network discovery tool for Mac OS X.
Answer: A,C,D

GIAC   GPEN   GPEN   GPEN demo

NO.7 An executive in your company reports odd behavior on her PDA. After investigation you discover that a
trusted device is actually copying data off the PDA. The executive tells you that the behavior started
shortly after accepting an e-business card from an unknown person. What type of attack is this?
A. Session Hijacking
B. PDA Hijacking
C. Privilege Escalation
D. Bluesnarfing
Answer: D

GIAC exam   GPEN exam prep   GPEN test answers   GPEN exam

NO.8 Which of the following tools is used to verify the network structure packets and confirm that the packets
are constructed according to specification?
A. EtherApe
B. Snort decoder
C. AirSnort
D. snort_inline
Answer: B

GIAC   GPEN original questions   GPEN certification training

NO.9 Which of the following enables an inventor to legally enforce his right to exclude others from using his
invention?
A. Patent
B. Spam
C. Phishing
D. Artistic license
Answer: A

GIAC   GPEN   GPEN exam prep

NO.10 You work as a Network Administrator for Net World International. The company has a Windows Active
Directory-based single domain single forest network. The functional level of the forest is Windows Server
2003. There are ten Sales Managers in the company. The company has recently provided laptops to all its
Sales Managers. All the laptops run Windows XP Professional. These laptops will be connected to the
company's network through wireless connections. The company's management wants to implement
Shared Key authentication for these laptops. When you try to configure the network interface card of one
of the laptops for Shared Key authentication, you find no such option. What will you do to enable Shared
Key authentication?
A. Install PEAP-MS-CHAP v2
B. Install Service Pack 1
C. Enable WEP
D. Install EAP-TLS
Answer: C

GIAC original questions   GPEN test answers   GPEN study guide   GPEN

NO.11 In which of the following scanning techniques does a scanner connect to an FTP server and request
that server to start data transfer to the third system?
A. Bounce attack scanning
B. Xmas Tree scanning
C. TCP FIN scanning
D. TCP SYN scanning
Answer: A

GIAC   GPEN test questions   GPEN answers real questions   GPEN answers real questions

NO.12 Which of the following types of cyber stalking damage the reputation of their victim and turn other
people against them by setting up their own Websites, blogs or user pages for this purpose?
A. Encouraging others to harass the victim
B. False accusations
C. Attempts to gather information about the victim
D. False victimization
Answer: B

GIAC exam simulations   GPEN   GPEN   GPEN

NO.13 Which of the following statements are true about WPA?
Each correct answer represents a complete solution. Choose all that apply.
A. WPA-PSK converts the passphrase into a 256-bit key.
B. WPA provides better security than WEP.
C. WPA-PSK requires a user to enter an 8-character to 63-character passphrase into a wireles s client.
D. Shared-key WPA is vulnerable to password cracking attacks if a weak passphrase is used.
Answer: A,B,C,D

GIAC test   GPEN exam prep   GPEN   GPEN exam   GPEN   GPEN exam dumps

NO.14 Which of the following tools can be used to perform brute force attack on a remote database?
Each correct answer represents a complete solution. Choose all that apply.
A. FindSA
B. SQLDict
C. nmap
D. SQLBF
Answer: A,B,D

GIAC   GPEN certification training   GPEN

NO.15 Which of the following statements are true about MS-CHAPv2?
Each correct answer represents a complete solution. Choose all that apply.
A. It is a connectionless protocol.
B. It can be replaced with EAP-TLS as the authentication mechanism for PPTP.
C. It provides an authenticator-controlled password change mechanism.
D. It is subject to offline dictionary attacks.
Answer: B,C,D

GIAC test answers   GPEN   GPEN test questions   GPEN   GPEN   GPEN test questions

NO.16 You work as a Network Administrator for Infosec Inc. Nowadays, you are facing an unauthorized
access in your Wi-Fi network. Therefore, you analyze a log that has been recorded by your favorite sniffer,
Ethereal. You are able to discover the cause of the unauthorized access after noticing the following string
in the log file:
(Wlan.fc.type_subtype eq 32 and llc.oui eq 0x00601d and llc.pid eq 0x0001)
When you find All your 802.11b are belong to us as the payload string, you are convinced about which tool
is being used for the unauthorized access. Which of the following tools have you ascertained?
A. AirSnort
B. Kismet
C. AiroPeek
D. NetStumbler
Answer: D

GIAC braindump   GPEN practice test   GPEN answers real questions   GPEN questions

NO.17 Which of the following are the limitations for the cross site request forgery (CSRF) attack?
Each correct answer represents a complete solution. Choose all that apply.
A. The target site should have limited lifetime authentication cookies.
B. The attacker must target a site that doesn't check the referrer header.
C. The target site should authenticate in GET and POST parameters, not only cookies.
D. The attacker must determine the right values for all the form inputs.
Answer: B,D

GIAC exam simulations   GPEN   GPEN   GPEN

NO.18 Which of the following options holds the strongest password?
A. california
B. $#164aviD