GIAC Penetration Tester (GPEN) Free Practice Exam Questions

62 real GIAC Penetration Tester (GPEN) exam questions with answers and AI explanations. GIAC certification prep — page 1 of 7.

1. Question 1: What is the MOST important document to obtain before beginning any penetration testing?
2. Question 2: When DNS is being used for load balancing, why would a penetration tester choose to identify a scan target by its IP address rather than its host name?
3. Question 3: Which of the following modes describes a wireless interface that is configured to passively grab wireless frames from one wireless channel and pass them to the…
4. Question 4: By default Active Directory Controllers store password representations in which file?
5. Question 5: Which Metasploitvncinject stager will allow VNC communications from the attacker to a listening port of the attacker's choosing on the victim machine?
6. Question 6: While reviewing traffic from a tcpdump capture, you notice the following commands being sent from a remote system to one of your web servers: C:\>sc winternet.…
7. Question 7: A penetration tester obtains telnet access to a target machine using a captured credential. While trying to transfer her exploit to the target machine, the net…
8. Question 8: A client with 7200 employees in 14 cities (all connected via high speed WAN connections) has suffered a major external security breach via a desktop which cost…
9. Question 12: A penetration tester used a client-side browser exploit from metasploit to get an unprivileged shell prompt on the target Windows desktop. The penetration test…
10. Question 13: A tester has been contracted to perform a penetration test for a corporate client. The scope of the test is limited to end-user workstations and client program…