New 2023 Guaranteed Success with TestSimulate GPEN Dumps GIAC PDF Questions [Q17-Q36]

QUESTION 17
Which of the following statements about SSID is NOT true?

QUESTION 18
Adam works as a professional Computer Hacking Forensic Investigator. He wants to investigate a suspicious email that is sent using a Microsoft Exchange server. Which of the following files will he review to accomplish the task?
Each correct answer represents a part of the solution. Choose all that apply.

QUESTION 19
You enter the following URL on your Web browser:
http://www.we-are-secure.com/scripts/..%co%af../..%co%
af../windows/system32/cmd.exe?/c+dir+c:
What kind of attack are you performing?

QUESTION 20
Which of the following are the two different file formats in which Microsoft Outlook saves e-mail messages based on system configuration?
Each correct answer represents a complete solution. Choose two.

QUESTION 21
Which of the following Web attacks is performed by manipulating codes of programming languages such as SQL, Perl, Java present in the Web pages?

QUESTION 22
Which of the following techniques is used to monitor telephonic and Internet conversations by a third party?

QUESTION 23
Which of the following tools can be used by a user to hide his identity?
Each correct answer represents a complete solution. Choose all that apply.

QUESTION 24
Which TCP and UDP ports can be used to start a NULL session attack in NT and 2000 operating systems?

QUESTION 25
Which of the following statements are true about SSIDs?
Each correct answer represents a complete solution. Choose all that apply.

QUESTION 26
You work as an IT Technician for PassGuide Inc. You have to take security measures for the wireless network of the company. You want to prevent other computers from accessing the company’s wireless network. On the basis of the hardware address, which of the following will you use as the best possible method to accomplish the task?

QUESTION 27
You are pen testing a Windows system remotely via a raw netcat shell. You want to get a listing of all the local users in the administrators group, what command would you use?

QUESTION 28
Analyze the output of the two commands below:

Which of the following can be factually inferred from the results of these commands?

QUESTION 29
You work as a Network Administrator in the Secure Inc. You often need to send PDF documents that contain secret information, such as, client password, their credit card details, email passwords, etc. through email to your customers. However, you are making PDFs password protected you are getting complaints from customers that their secret information is being misused. When you analyze this complaint you get that however you are applying the passwords on PDFs, they are not providing the maximum protection. What may be the cause of this security hole?

QUESTION 30
What is the impact on pre-calculated Rainbow Tables of adding multiple salts to a set of passwords?

QUESTION 31
Which of the following Penetration Testing steps includes network mapping and OS fingerprinting?

QUESTION 32
An executive in your company reports odd behavior on her PDA. After investigation you discover that a trusted device is actually copying data off the PDA. The executive tells you that the behavior started shortly after accepting an e-business card from an unknown person. What type of attack is this?

QUESTION 33
How many bits encryption does SHA-1 use?

QUESTION 34
Which of the following is the default port value of beast Trojan?

QUESTION 35
Which of the following tools is a Windows-based commercial wireless LAN analyzer for IEEE802.11b and supports all high level protocols such as TCP/IP, NetBEUI, and IPX?

QUESTION 36
Which of the following enables an inventor to legally enforce his right to exclude others from using his invention?