GPEN Online Practice Questions and Answers

ACME corporation has decided to setup wireless (IEEE 802.11) network in it's sales branch at Tokyo and found that channels 1, 6, 9,11 are in use by the neighboring offices. Which is the best channel they can use?

A. 4

B. 5

C. 10

D. 2

Your company has decided that the risk of performing a penetration test Is too great. You would like to figure out other ways to find vulnerabilities on their systems, which of the following is MOST likely to be a valid alternative?

A. Network scope Analysis

B. Baseline Data Reviews

C. Patch Policy Review

D. Configuration Reviews

You are performing a vulnerability assessment using Nessus and your clients printers begin printing pages of random text and showing error messages. The client is not happy with the situation. What is the best way to proceed?

A. Enable the "Skip all primers" option and re-scan

B. Ensure Safe Checks is enabled in Nessus scan policies

C. Remove primer IP addresses from your target list

D. Verify primers are in scope and tell the client In progress scans cannot be stopped

How many bits does SYSKEY use for encryption?

A. 32

B. 64

C. 512

D. 128

Which of the following attacks can be overcome by applying cryptography?

A. Web ripping

B. Sniffing

C. DoS

D. Buffer overflow

Which of the following statements are true about session hijacking?

Each correct answer represents a complete solution. Choose all that apply.

A. It is used to slow the working of victim's network resources.

B. TCP session hijacking is when a hacker takes over a TCP session between two machines.

C. Use of a long random number or string as the session key reduces session hijacking.

D. It is the exploitation of a valid computer session to gain unauthorized access to information or services in a computer system.

Which of the following are the countermeasures against WEP cracking? Each correct answer represents a part of the solution. Choose all that apply.

A. Using the longest key supported by hardware.

B. Using a non-obvious key.

C. Using a 16 bit SSID.

D. Changing keys often.

What does APNIC stand for?

A. Asia-Pacific Network Information Center

B. American-Pacific Network Information Center

C. American Private Network Information Center

D. Asian Private Network Information Center

Which of the following is an open source Web scanner?

A. Nikto

B. GFI LANguird

C. NetRecon

D. Internet scanner

Which of the following tools is a wireless sniffer and analyzer that works on the Windows operating system?

A. Aeropeek

B. Kismet

C. Airsnort

D. Void11