あなたはIT職員ですか。成功したいのですか。成功したいのならJapanCertのGIACのGPEN試験トレーニング資料を利用してください。当社の資料は実践の検証に合格したもので、あなたが首尾よくIT認証試験に合格することを助けます。JapanCertのGIACのGPENトレーニング資料を手に入れたらあなたはIT業種でもっとよい昇進を持つようになり、高レベルのホワイトカラーのトリートメントを楽しむこともできます。あなたはまだ何を心配しているのですか。JapanCertのGIACのGPENトレーニング資料はあなたのニーズを満たすことができますから、躊躇わずにJapanCertを選んでください。JapanCertはあなたと苦楽を共にして、一緒に挑戦に直面します。
GPEN認定試験について、あなたはどうやって思っているのですか。非常に人気があるGIACの認定試験の一つとして、この試験も大切です。しかし、試験の準備をよりよくできるために試験参考書を探しているときに、優秀な参考資料を見つけるのはたいへん難しいことがわかります。では、どうしたらいいでしょうか。大丈夫ですよ。JapanCertはあなたの望みを察して、受験生の皆さんの要望にこたえるために、一番良い試験GPEN問題集を提供してあげます。
JapanCertはGIACのGPEN認定試験についてすべて資料を提供するの唯一サイトでございます。受験者はJapanCertが提供した資料を利用してGPEN認証試験は問題にならないだけでなく、高い点数も合格することができます。
試験番号：GPEN問題集
試験科目：GIAC 「GIAC Certified Penetration Tester」
最近更新時間：2014-02-17
問題と解答：384
GIACのGPEN認証試験はIT業界にとても重要な地位があることがみんなが、たやすくその証本をとることはではありません。いまの市場にとてもよい問題集が探すことは難しいです。JapanCertは認定で優秀なIT資料のウエブサイトで、ここでGIAC GPEN認定試験の先輩の経験と暦年の試験の材料を見つけることができるとともに部分の最新の試験の題目と詳しい回答を無料にダウンロードこともできますよ。
みなさんにJapanCertを選ぶのはより安心させるためにJapanCertは部分のGIAC GPEN試験材料がネットで提供して、君が無料でダウンロードすることができます。安心に弊社の商品を選ぶとともに貴重な時間とエネルギーを節約することができる。JapanCertは真実のGIAC GPEN認証試験の問題集が100%で君の試験の合格を保証します。君の明るい将来を祈っています。
JapanCertは実環境であなたの本当のGIAC GPEN試験に準備するプロセスを見つけられます。もしあなたが初心者だったら、または自分の知識や専門的なスキルを高めたいのなら、JapanCertのGIACのGPEN問題集があなたを助けることができ、一歩一歩でその念願を実現することにヘルプを差し上げます。JapanCertのGIACのGPENは試験に関する全ての質問が解決して差し上げられます。それに一年間の無料更新サービスを提供しますから、JapanCertのウェブサイトをご覧ください。
JapanCertのGPEN問題集というものをきっと聞いたことがあるでしょう。でも、利用したことがありますか。「JapanCertのGPEN問題集は本当に良い教材です。おかげで試験に合格しました。」という声がよく聞こえています。JapanCertは問題集を利用したことがある多くの人々からいろいろな好評を得ました。それはJapanCertはたしかに受験生の皆さんを大量な時間を節約させ、順調に試験に合格させることができますから。
購入前にお試し,私たちの試験の質問と回答のいずれかの無料サンプルをダウンロード：http://www.japancert.com/GPEN.html
NO.1 An executive in your company reports odd behavior on her PDA. After investigation you
discover that a trusted device is actually copying data off the PDA. The executive tells you that the
behavior started shortly after accepting an e-business card from an unknown person. What type of
attack is this?
A. Session Hijacking
B. PDA Hijacking
C. Privilege Escalation
D. Bluesnarfing
Answer: D
GIAC認定試験 GPEN GPEN認証試験 GPEN
NO.2 Which of the following statements are true about WPA?
Each correct answer represents a complete solution. Choose all that apply.
A. WPA-PSK converts the passphrase into a 256-bit key.
B. WPA provides better security than WEP .
C. WPA-PSK requires a user to enter an 8-character to 63-character passphrase into a wireles s client.
D. Shared-key WPA is vulnerable to password cracking attacks if a weak passphrase is used.
Answer: A,B,C,D
GIAC認証試験 GPEN過去問 GPEN認定資格
NO.3 You execute the following netcat command:
c:\target\nc -1 -p 53 -d -e cmd.exe
What action do you want to perform by issuing the above command?
A. Capture data on port 53 and performing banner grabbing.
B. Listen the incoming traffic on port 53 and execute the remote shell.
C. Listen the incoming data and performing port scanning.
D. Capture data on port 53 and delete the remote shell.
Answer: B
GIAC GPEN GPEN認定証 GPEN認定資格
NO.4 You work as a professional Ethical Hacker. You are assigned a project to perform blackhat
testing on www.we-are-secure.com. You visit the office of we-are-secure.com as an air-condition
mechanic. You claim that someone from the office called you saying that there is some fault in the
air-conditioner of the server room. After some inquiries/arguments, the Security Administrator
allows you to repair the air-conditioner of the server room.
When you get into the room, you found the server is Linux-based. You press the reboot button of
the server after inserting knoppix Live CD in the CD drive of the server. Now, the server promptly
boots backup into Knoppix. You mount the root partition of the server after replacing the root
password in the /etc/shadow file with a known password hash and salt. Further, you copy the netcat
tool on the server and install its startup files to create a reverse tunnel and move a shell to a remote
server whenever the server is restarted. You simply restart the server, pull out the Knoppix Live CD
from the server, and inform that the air-conditioner is working properly.
After completing this attack process, you create a security auditing report in which you mention
various threats such as social engineering threat, boot from Live CD, etc. and suggest the
countermeasures to stop booting from the external media and retrieving sensitive data. Which of
the following steps have you suggested to stop booting from the external media and retrieving
sensitive data with regard to the above scenario?
Each correct answer represents a complete solution. Choose two.
A. Encrypting disk partitions
B. Using password protected hard drives
C. Placing BIOS password
D. Setting only the root level access for sensitive data
Answer: A,B
GIAC参考書 GPEN GPEN認証試験
NO.5 A Web developer with your company wants to have wireless access for contractors that come
in to work on various projects. The process of getting this approved takes time. So rather than wait,
he has put his own wireless router attached to one of the network ports in his department. What
security risk does this present?
A. An unauthorized WAP is one way for hackers to get into a network.
B. It is likely to increase network traffic and slow down network performance.
C. This circumvents network intrusion detection.
D. None, adding a wireless access point is a common task and not a security risk.
Answer: A
GIAC GPEN認定証 GPEN GPEN認証試験 GPEN
NO.6 Which of the following encryption modes are possible in WEP?
Each correct answer represents a complete solution. Choose all that apply.
A. No encryption
B. 256 bit encryption
C. 128 bit encryption
D. 40 bit encryption
Answer: A,C,D
GIAC認定証 GPEN GPEN認定証 GPEN認定証 GPEN GPEN
NO.7 You have inserted a Trojan on your friend's computer and you want to put it in the startup so
that whenever the computer reboots the Trojan will start to run on the startup. Which of the
following registry entries will you edit to accomplish the task?
A. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Start
B. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Auto
C. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Startup
D. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
Answer: D
GIAC練習問題 GPEN GPEN認証試験 GPEN認定資格
NO.8 Which of the following statements are true about SSIDs?
Each correct answer represents a complete solution. Choose all that apply.
A. SSIDs are case insensitive text strings and have a maximum length of 64 characters.
B. Configuring the same SSID as that of the other Wireless Access Points (WAPs) of other networks
will create a conflict.
C. SSID is used to identify a wireless network.
D. All wireless devices on a wireless network must have the same SSID in order to communicate
with each other.
Answer: B,C,D
GIAC GPEN認定資格 GPEN参考書 GPEN認定試験
NO.9 John works as a professional Ethical Hacker. He has been assigned a project to test the security
of www.we-are-secure.com. He copies the whole structure of the We-are-secure Web site to the
local disk and obtains all the files on the Web site. Which of the following techniques is he using to
accomplish his task?
A. TCP FTP proxy scanning
B. Eavesdropping
C. Web ripping
D. Fingerprinting
Answer: C
GIAC問題集 GPEN GPEN GPEN
NO.10 You work as a Network Administrator for Infosec Inc. Nowadays, you are facing an
unauthorized access in your Wi-Fi network. Therefore, you analyze a log that has been recorded by
your favorite sniffer, Ethereal. You are able to discover the cause of the unauthorized access after
noticing the following string in the log file:
(Wlan.fc.type_subtype eq 32 and llc.oui eq 0x00601d and llc.pid eq 0x0001)
When you find All your 802.11b are belong to us as the payload string, you are convinced about
which tool is being used for the unauthorized access. Which of the following tools have you
ascertained?
A. AirSnort
B. Kismet
C. AiroPeek
D. NetStumbler
Answer: D
GIAC問題集 GPEN認定証 GPEN
NO.11 TCP FIN scanning is a type of stealth scanning through which the attacker sends a FIN packet to
the target port. If the port is closed, the victim assumes that this packet was sent mistakenly by the
attacker and sends the RST packet to the attacker. If the port is open, the FIN packet will be ignored
and the port will drop the packet. Which of the following operating systems can be easily identified
with the help of TCP FIN scanning?
A. Solaris
B. Red Hat
C. Windows
D. Knoppix
Answer: C
GIAC GPEN認定試験 GPEN認定試験 GPEN GPEN GPEN問題集
NO.12 Which of the following options holds the strongest password?
A. california
B. $#164aviD
没有评论:
发表评论