Free GIAC GPEN Exam Dumps Questions & Answers

Which of the following tools automates password guessing in the NetBIOS session?

• A.John the Ripper
• B.NTInfoScan
• C.L0phtCrack
• D.Legion

Adam, a malicious hacker, hides a hacking tool from a system administrator of his company by using Alternate Data Streams (ADS) feature. Which of the following statements is true in context with the above scenario?

• A.Adam is using FAT file system.
• B.Adam is using NTFS file system.
• C.Alternate Data Streams is a feature of Linux operating system.
• D.Adam's system runs on Microsoft Windows 98 operating system.

How many bits does SYSKEY use for encryption?

• A.128
• B.32
• C.64
• D.512

You have been contracted to map me network and try to compromise the servers for a client.
Which of the following would be an example of scope creep' with respect to this penetration testing project?

• A.Disclosing information forbidden in the NDA
• B.Scanning network systems slowly so you are not detected
• C.Being asked to compromise workstations
• D.Compromising a server then escalating privileges

John, a novice web user, makes a new E-mail account and keeps his password as "apple", his favorite fruit. John's password is vulnerable to which of the following password cracking attacks?
Each correct answer represents a complete solution. Choose all that apply.

• A.Dictionary attack
• B.Hybrid attack
• C.Brute Force attack
• D.Rule based attack