[Q164-Q182] Updated Jan-2024 Exam Engine or PDF for the GIAC GPEN test to help you quickly prepare for the GIAC exam!

QUESTION 164
Which of the following tools is used to verify the network structure packets and confirm that the packets are constructed according to specification?

QUESTION 165
Which of the following techniques are NOT used to perform active OS fingerprinting? Each correct answer represents a complete solution. Choose all that apply.

QUESTION 166
What does APNIC stand for?

QUESTION 167
You want to integrate the Nikto tool with nessus vulnerability scanner. Which of the following steps will you take to accomplish the task?
Each correct answer represents a complete solution. Choose two.

QUESTION 168
You are pen testing a Linux target from your windows-based attack platform. You just moved a script file from the windows system to the Linux target, but it will not execute properly. What is the most likely problem?

QUESTION 169
Which of the following standards is used in wireless local area networks (WLANs)?

QUESTION 170
Which of the following is the most common method for an attacker to spoof email?

QUESTION 171
Which of the following tools are used for footprinting?
Each correct answer represents a complete solution. Choose all that apply.

QUESTION 172
Which of the following Web attacks is performed by manipulating codes of programming languages such as SQL, Perl, Java present in the Web pages?

QUESTION 173
Alice wants to prove her identity to Bob. Bob requests her password as proof of identity, which Alice dutifully provides (possibly after some transformation like a hash function); meanwhile, Eve is eavesdropping the conversation and keeps the password. After the interchange is over, Eve connects to Bob posing as Alice; when asked for a proof of identity, Eve sends Alice’s password read from the last session, which Bob accepts. Which of the following attacks is being used by Eve?

QUESTION 174
Which of the following is the default port value of beast Trojan?

QUESTION 175
Anonymizers are the services that help make a user’s own Web surfing anonymous. An anonymizer removes all the identifying information from a user’s computer while the user surfs the Internet. It ensures the privacy of the user in this manner. After the user anonymizes a Web access with an anonymizer prefix, every subsequent link selected is also automatically accessed anonymously. Which of the following are limitations of anonymizers?
Each correct answer represents a complete solution. Choose all that apply.

QUESTION 176
Which of the following tools is an automated tool that is used to implement SQL injections and to retrieve data from Web server databases?

QUESTION 177
John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He has successfully completed the following pre-attack phases while testing the security of the server:
Footprinting Scanning Now he wants to conduct the enumeration phase.
Which of the following tools can John use to conduct it?
Each correct answer represents a complete solution. Choose all that apply.

QUESTION 178
You are running a vulnerability scan on a remote network and the traffic Is not making It to the target system.
You investigate the connection issue and determine that the traffic is making it to the internal interface of your network firewall, but not making. It to the external Interface or to any systems outside your firewall. What is the most likely problem?

QUESTION 179
In which of the following attacks does the attacker overload the CAM table of the switch?

QUESTION 180
Which of the following functions can you use to mitigate a command injection attack?
Each correct answer represents a complete solution. Choose all that apply.

QUESTION 181
You want to retrieve password files (stored in the Web server’s index directory) from various Web sites. Which of the following tools can you use to accomplish the task?

QUESTION 182
Which of the following is the most common method for an attacker to spoof email?