Free GPEN Exam Dumps

Question 46

- (Topic 1)
Which type of Cross-Sire Scripting (XSS> vulnerability is hardest for automated testing tools to detect, and for what reason?

A. Stored XS
B. because it may be located anywhere within static or dynamic sitecontent
C. Stored XS
D. because it depends on emails and instant messaging system
E. Reflected XS
F. because It can only be found by analyzing web server response
G. Reflected XSS: because it is difficult to find within large web server log

Correct Answer:A

Question 47

- (Topic 4)
Which of the following types of Penetration testing provides the testers with complete knowledge of the infrastructure to be tested?

A. White Box
B. Black Box
C. Grey Box
D. Water Fall

Correct Answer:A

Question 48

- (Topic 2)
What happens when you scan a broadcast IP address of a network?
Each correct answer represents a complete solution. Choose all that apply.

A. It may show smurf DoS attack in the network IDS of the victi
B. It leads to scanning of all the IP addresses on that subnet at the same tim
C. It will show an error in the scanning proces
D. Scanning of the broadcast IP address cannot be performe

Correct Answer:AB

Question 49

- (Topic 1)
A penetration tester wishes to stop the Windows Firewall process on a remote host running Windows Vista She issues the following commands:
GPEN dumps exhibit
A check of the remote host indicates that Windows Firewall is still running. Why did the command fail?

A. The kernel prevented the command from being execute
B. The user does not have the access level needed to stop the firewal
C. The sc command needs to be passed the IP address of the targe
D. The remote server timed out and did not complete the comman

Correct Answer:C

Question 50

- (Topic 3)
John works as a professional Ethical Hacker. He is assigned a project to test the security of www.we-are-secure.com. He enters a single quote in the input field of the login page of the Weare- secure Web site and receives the following error message:
Microsoft OLE DB Provider for ODBC Drivers error '0x80040E14'
This error message shows that the We-are-secure Website is vulnerable to __________.

A. A SQL injection attack
B. A Denial-of-Service attack
C. A buffer overflow
D. An XSS attack

Correct Answer:A