GIAC GPEN 덤프데모

경쟁이 치열한 IT업계에서 굳굳한 자신만의 자리를 찾으려면 국제적으로 인정받는 IT자격증 취득은 너무나도 필요합니다. GIAC인증 GPEN시험은 IT인사들중에서 뜨거운 인기를 누리고 있습니다. ITExamDump는 IT인증시험에 대비한 시험전 공부자료를 제공해드리는 전문적인 사이트입니다.한방에 쉽게GIAC인증 GPEN시험에서 고득점으로 패스하고 싶다면ITExamDump의GIAC인증 GPEN덤프를 선택하세요.저렴한 가격에 비해 너무나도 높은 시험적중율과 시험패스율, 언제나 여러분을 위해 최선을 다하는ITExamDump가 되겠습니다.

ITExamDump는 여러분이 원하는 최신 최고버전의 GIAC 인증GPEN덤프를 제공합니다. GIAC 인증GPEN덤프는 IT업계전문가들이 끊임없는 노력과 지금까지의 경험으로 연구하여 만들어낸 제일 정확한 시험문제와 답들로 만들어졌습니다. ITExamDump의 문제집으로 여러분은 충분히 안전이 시험을 패스하실 수 있습니다. 우리 ITExamDump 의 문제집들은 모두 100%합격율을 자랑하며 ITExamDump의 제품을 구매하였다면 GIAC 인증GPEN시험패스와 자격증 취득은 근심하지 않으셔도 됩니다. 여러분은 IT업계에서 또 한층 업그레이드 될것입니다.

ITExamDump는 고객님의 IT자격증취득의 작은 소원을 이루어지게 도워드리는 IT인증시험덤프를 제공해드리는 전문적인 사이트입니다. ITExamDump 표 GIAC인증GPEN시험덤프가 있으면 인증시험걱정을 버리셔도 됩니다. ITExamDump 표 GIAC인증GPEN덤프는 시험출제 예상문제를 정리해둔 실제시험문제에 가장 가까운 시험준비공부자료로서 공을 들이지않고도 시험패스가 가능합니다.

시험 번호/코드: GPEN
시험 이름: GIAC (GIAC Certified Penetration Tester)

IT업계에 종사하는 분이라면 국제적으로 인정받는 IT인증시험에 도전하여 자격증을 취득하셔야 합니다. ITExamDump의 GIAC인증 GPEN덤프는 이 시험에 참가한 IT인사들의 검증을 받은 최신 시험대비 공부자료입니다. ITExamDump의 GIAC인증 GPEN덤프로 시험을 쉽게 패스하여 자격증을 취득하면 승진이나 연봉인상에 많은 편리를 가져다드립니다. 저희는 항상 여러분들의 곁을 지켜줄것입니다.

IT업계에서 자신만의 위치를 찾으려면 자격증을 많이 취득하는것이 큰 도움이 될것입니다. GIAC 인증 GPEN시험은 아주 유용한 시험입니다. GIAC 인증GPEN시험출제경향을 퍼펙트하게 연구하여ITExamDump에서는GIAC 인증GPEN시험대비덤프를 출시하였습니다. ITExamDump에서 제공해드리는GIAC 인증GPEN시험덤프는 시장에서 판매하고 있는GIAC 인증GPEN덤프중 가장 최신버전덤프로서 덤프에 있는 문제만 공부하시면 시험통과가 쉬워집니다.

ITExamDump의 GIAC인증 GPEN덤프를 공부하여GIAC인증 GPEN시험을 패스하는건 아주 간단한 일입니다.저희 사이트에서 제작한GIAC인증 GPEN덤프공부가이드는 실제시험의 모든 유형과 범위가 커버되어있어 높은 적중율을 자랑합니다.시험에서 불합격시 덤프비용은 환불신청 가능하기에 안심하고 시험준비하시면 됩니다.

GPEN 덤프무료샘플다운로드하기: http://www.itexamdump.com/GPEN.html

NO.1 You work as a Network Administrator for Infosec Inc. Nowadays, you are facing an unauthorized
access in your Wi-Fi network. Therefore, you analyze a log that has been recorded by your favorite sniffer,
Ethereal. You are able to discover the cause of the unauthorized access after noticing the following string
in the log file:
(Wlan.fc.type_subtype eq 32 and llc.oui eq 0x00601d and llc.pid eq 0x0001)
When you find All your 802.11b are belong to us as the payload string, you are convinced about which tool
is being used for the unauthorized access. Which of the following tools have you ascertained?
A. AirSnort
B. Kismet
C. AiroPeek
D. NetStumbler
Answer: D

GIAC   GPEN   GPEN dumps   GPEN pdf

NO.2 An executive in your company reports odd behavior on her PDA. After investigation you discover that a
trusted device is actually copying data off the PDA. The executive tells you that the behavior started
shortly after accepting an e-business card from an unknown person. What type of attack is this?
A. Session Hijacking
B. PDA Hijacking
C. Privilege Escalation
D. Bluesnarfing
Answer: D

GIAC dumps   GPEN   GPEN시험문제   GPEN   GPEN

NO.3 John works as a professional Ethical Hacker. He has been assigned a project to test the security of
www.we-are-secure.com. He copies the whole structure of the We-are-secure Web site to the local disk
and obtains all the files on the Web site. Which of the following techniques is he using to accomplish his
task?
A. TCP FTP proxy scanning
B. Eavesdropping
C. Web ripping
D. Fingerprinting
Answer: C

GIAC   GPEN   GPEN   GPEN pdf

NO.4 Which of the following encryption modes are possible in WEP?
Each correct answer represents a complete solution. Choose all that apply.
A. No encryption
B. 256 bit encryption
C. 128 bit encryption
D. 40 bit encryption
Answer: A,C,D

GIAC   GPEN시험문제   GPEN   GPEN자료   GPEN자격증

NO.5 You have inserted a Trojan on your friend's computer and you want to put it in the startup so that
whenever the computer reboots the Trojan will start to run on the startup. Which of the following registry
entries will you edit to accomplish the task?
A. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Start
B. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Auto
C. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Startup
D.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
Answer: D

GIAC   GPEN pdf   GPEN

NO.6 Adam works on a Linux system. He is using Sendmail as the primary application to transmit emails.
Linux uses Syslog to maintain logs of what has occurred on the system. Which of the following log files
contains e-mail information such as source and destination IP addresses, date and time stamps etc?
A. /log/var/logd
B. /var/log/logmail
C. /log/var/mailog
D. /var/log/mailog
Answer: D

GIAC   GPEN   GPEN자료

NO.7 You work as a Network Administrator for Net World International. The company has a Windows Active
Directory-based single domain single forest network. The functional level of the forest is Windows Server
2003. There are ten Sales Managers in the company. The company has recently provided laptops to all its
Sales Managers. All the laptops run Windows XP Professional. These laptops will be connected to the
company's network through wireless connections. The company's management wants to implement
Shared Key authentication for these laptops. When you try to configure the network interface card of one
of the laptops for Shared Key authentication, you find no such option. What will you do to enable Shared
Key authentication?
A. Install PEAP-MS-CHAP v2
B. Install Service Pack 1
C. Enable WEP
D. Install EAP-TLS
Answer: C

GIAC dumps   GPEN   GPEN   GPEN dump   GPEN

NO.8 TCP FIN scanning is a type of stealth scanning through which the attacker sends a FIN packet to the
target port. If the port is closed, the victim assumes that this packet was sent mistakenly by the attacker
and sends the RST packet to the attacker. If the port is open, the FIN packet will be ignored and the port
will drop the packet. Which of the following operating systems can be easily identified with the help of TCP
FIN scanning.?
A. Solaris
B. Red Hat
C. Windows
D. Knoppix
Answer: C

GIAC   GPEN기출문제   GPEN   GPEN시험문제   GPEN

NO.9 You work as a professional Ethical Hacker. You are assigned a project to perform blackhat testing on
www.we-are-secure.com. You visit the office of we-are-secure.com as an air-condition mechanic. You
claim that someone from the office called you saying that there is some fault in the air-conditioner of the
server room. After some inquiries/arguments, the Security Administrator allows you to repair the
air-conditioner of the server room.
When you get into the room, you found the server is Linux-based. You press the reboot button of the
server after inserting knoppix Live CD in the CD drive of the server. Now, the server promptly boots
backup into Knoppix. You mount the root partition of the server after replacing the root password in the
/etc/shadow file with a known password hash and salt. Further, you copy the netcat tool on the server and
install its startup files to create a reverse tunnel and move a shell to a remote server whenever the server
is restarted. You simply restart the server, pull out the Knoppix Live CD from the server, and inform that
the air-conditioner is working properly.
After completing this attack process, you create a security auditing report in which you mention various
threats such as social engineering threat, boot from Live CD, etc. and suggest the countermeasures to
stop booting from the external media and retrieving sensitive data. Which of the following steps have you
suggested to stop booting from the external media and retrieving sensitive data with regard to the above
scenario?
Each correct answer represents a complete solution. Choose two.
A. Encrypting disk partitions
B. Using password protected hard drives
C. Placing BIOS password
D. Setting only the root level access for sensitive data
Answer: A,B

GIAC자료   GPEN자격증   GPEN   GPEN dump

NO.10 In which of the following scanning techniques does a scanner connect to an FTP server and request
that server to start data transfer to the third system?
A. Bounce attack scanning
B. Xmas Tree scanning
C. TCP FIN scanning
D. TCP SYN scanning
Answer: A

GIAC자료   GPEN자격증   GPEN pdf   GPEN   GPEN인증

NO.11 Which of the following statements are true about KisMAC?
A. Data generated by KisMAC can also be saved in pcap format.
B. It cracks WEP and WPA keys by Rainbow attack or by dictionary attack.
C. It scans for networks passively on supported cards.
D. It is a wireless network discovery tool for Mac OS X.
Answer: A,C,D

GIAC   GPEN pdf   GPEN기출문제

NO.12 Which of the following statements is true about the Digest Authentication scheme?
A. In this authentication scheme, the username and password are passed with every request, not just
when the user first types them.
B. A valid response from the client contains a checksum of the username, the password, the given
random value, the HTTP method, and the requested URL.
C. The password is sent over the network in clear text format.
D. It uses the base64 encoding encryption scheme.
Answer: B

GIAC   GPEN   GPEN   GPEN

NO.13 A Web developer with your company wants to have wireless access for contractors that come in to work
on various projects. The process of getting this approved takes time. So rather than wait, he has put his
own wireless router attached to one of the network ports in his department. What security risk does this
present?
A. An unauthorized WAP is one way for hackers to get into a network.
B. It is likely to increase network traffic and slow down network performance.
C. This circumvents network intrusion detection.
D. None, adding a wireless access point is a common task and not a security risk.
Answer: A

GIAC   GPEN pdf   GPEN   GPEN

NO.14 Which of the following tools is used to verify the network structure packets and confirm that the packets
are constructed according to specification?
A. EtherApe
B. Snort decoder
C. AirSnort
D. snort_inline
Answer: B

GIAC   GPEN   GPEN최신덤프   GPEN dump   GPEN자료

NO.15 Which of the following attacks is a form of active eavesdropping in which the attacker makes
independent connections with the victims and relays messages between them, making them believe that
they are talking directly to each other over a private connection, when in fact the entire conversation is
controlled by the attacker?
A. DoS
B. Sniffing
C. Man-in-the-middle
D. Brute force
Answer: C

GIAC인증   GPEN   GPEN dumps   GPEN자격증

NO.16 Which of the following enables an inventor to legally enforce his right to exclude others from using his
invention?
A. Patent
B. Spam
C. Phishing
D. Artistic license
Answer: A

GIAC   GPEN   GPEN

NO.17 Which of the following attacks allows an attacker to sniff data frames on a local area network (LAN) or
stop the traffic altogether?
A. Man-in-the-middle
B. ARP spoofing
C. Port scanning
D. Session hijacking
Answer: B

GIAC pdf   GPEN자료   GPEN   GPEN   GPEN dump

NO.18 Which of the following ports will you scan to search for SNMP enabled devices in the network?
A. 163
B. 123
C. 151
D. 161
Answer: D

GIAC   GPEN dump   GPEN기출문제

NO.19 You want to integrate the Nikto tool with nessus vulnerability scanner. Which of the following steps will
you take to accomplish the task?
Each correct answer represents a complete solution. Choose two.
A. Restart nessusd service.
B. Place nikto.pl file in the /var/www directory.
C. Place nikto.pl file in the /etc/nessus directory.
D. Place the directory containing nikto.pl in root's PATH environment variable.
Answer: A,D

GIAC   GPEN   GPEN dump   GPEN자격증   GPEN

NO.20 Which of the following tools can be used to read NetStumbler's collected data files and present street
maps showing the logged WAPs as icons, whose color and shape indicates WEP mode and signal
strength?
A. NetStumbler
B. StumbVerter
C. WEPcrack
D. Kismet
Answer: B

GIAC덤프   GPEN인증   GPEN   GPEN최신덤프   GPEN시험문제   GPEN시험문제

NO.21 Which of the following options holds the strongest password?
A. california
B. $#164aviD