GIAC Penetration Tester (GPEN) Free Practice Exam Questions

62 real GIAC Penetration Tester (GPEN) exam questions with answers and AI explanations. GIAC certification prep — page 2 of 7.

1. Question 14: Analyze the command output below. Given this information, which is the appropriate next step for the tester? Starting Nmap4.53 (hnp://insecure.org I at2010-09-…
2. Question 20: Approximately how many packets are usually required to conduct a successful FMS attack onWEP?
3. Question 22: During a penetration test we determine that TCP port 22 is listening on a target host. Knowing that SSHD is the typical service that listens on that port we at…
4. Question 23: During a penetration test you discover a valid set of SSH credentials to a remote system. How can this be used to your advantage in a Nessus scan?
5. Question 25: How can a non-privileged user on a Unix system determine if shadow passwords are being used?
6. Question 26: You are running a vulnerability scan on a remote network and the traffic Is not making It to the target system. You investigate the connection issue and determ…
7. Question 28: When sniffing wireless frames, the interface mode plays a key role in successfully collecting traffic. Which of the mode or modes are best used for sniffing wi…
8. Question 29: Which of the following attacks allows an attacker to sniff data frames on a local area network (LAN) or stop the traffic altogether?
9. Question 30: Which of the following tools is used for vulnerability scanning and calls Hydra to launch a dictionary attack?
10. Question 31: What is the purpose of the following command? C:\>wmic /node:[target IP] /user:[admin-user] /password:[password] process call create [command]