최신GIAC Certified Penetration Tester - GPEN무료샘플문제
문제1
Wired Equivalent Privacy (WEP) is a security protocol for wireless local area networks (WLANs).
It has two components, authentication and encryption. It provides security equivalent to wired networks for wireless networks. WEP encrypts data on a wireless network by using a fixed secret key. Which of the following statements are true about WEP?
Each correct answer represents a complete solution. Choose all that apply.
Wired Equivalent Privacy (WEP) is a security protocol for wireless local area networks (WLANs).
It has two components, authentication and encryption. It provides security equivalent to wired networks for wireless networks. WEP encrypts data on a wireless network by using a fixed secret key. Which of the following statements are true about WEP?
Each correct answer represents a complete solution. Choose all that apply.
정답: B,C,D
문제2
Which of the following encryption modes are possible in WEP?
Each correct answer represents a complete solution. Choose all that apply.
Which of the following encryption modes are possible in WEP?
Each correct answer represents a complete solution. Choose all that apply.
정답: A,B,C
문제3
Which of the following is a tool for SSH and SSL MITM attacks?
Which of the following is a tool for SSH and SSL MITM attacks?
정답: C
문제4
When attempting to crack a password using Rainbow Tables, what is the output of the reduction function?
When attempting to crack a password using Rainbow Tables, what is the output of the reduction function?
정답: A
설명: (ITDumpsKR 회원만 볼 수 있음)
문제5
Which of the following tools is used for vulnerability scanning and calls Hydra to launch a dictionary attack?
Which of the following tools is used for vulnerability scanning and calls Hydra to launch a dictionary attack?
정답: B
문제6
A client has asked for a vulnerability scan on an internal network that does not have internet access. The rules of engagement prohibits any outside connection for the Nessus scanning machine. The customer has asked you to scan for a new critical vulnerability, which was released after the testing started, winch of the following methods of updating the Nessus plugins does not violate the rules of engagement?
A client has asked for a vulnerability scan on an internal network that does not have internet access. The rules of engagement prohibits any outside connection for the Nessus scanning machine. The customer has asked you to scan for a new critical vulnerability, which was released after the testing started, winch of the following methods of updating the Nessus plugins does not violate the rules of engagement?
정답: D
문제7
John works as a professional Ethical Hacker. He is assigned a project to test the security of www.we-are-secure.com. John has gained the access to the network of the organization and placed a backdoor in the network. Now, he wants to clear all event logs related to previous hacking attempts. Which of the following tools can John use if we-are-secure.com is using the Windows 2000 server?
Each correct answer represents a complete solution. Choose two.
John works as a professional Ethical Hacker. He is assigned a project to test the security of www.we-are-secure.com. John has gained the access to the network of the organization and placed a backdoor in the network. Now, he wants to clear all event logs related to previous hacking attempts. Which of the following tools can John use if we-are-secure.com is using the Windows 2000 server?
Each correct answer represents a complete solution. Choose two.
정답: B,C
문제8
You want to create a binary log file using tcpdump. Which of the following commands will you use?
You want to create a binary log file using tcpdump. Which of the following commands will you use?
정답: B
문제9
Which of the following encryption encoding techniques is used in the basic authentication method?
Which of the following encryption encoding techniques is used in the basic authentication method?
정답: D
문제10
Which of the following IEEE standards defines Wired Equivalent Privacy encryption scheme?
Which of the following IEEE standards defines Wired Equivalent Privacy encryption scheme?
정답: D