Online Access Free GPEN Practice Test

You work as a Network Administrator in the Secure Inc. Your company is facing various network attacks due to the insecure wireless network. You are assigned a task to secure your wireless network. For this, you have turned off broadcasting of the SSID. However, the unauthorized users are still able to connect to the wireless network. Which of the following statements can be the reason for this issue?
Each correct answer represents a complete solution. Choose all that apply.

• A.You have forgotten to turn off DHCP.
• B.You are using the default SSID.
• C.The SSID is still sent inside both client and AP packets.
• D.You are using WPA2 security scheme.

Which of the following is a passive information gathering tool?

• A.Snort
• B.Nmap
• C.Whois
• D.Ettercap

Which protocol would need to be available on a target in order for Nmap to identify services like IMAPS and POP3S?

• A.HTTPS
• B.SSL
• C.LDAP
• D.TLS

Which of the following protocols uses a combination of public key and symmetric encryption to provide communication privacy, authentication, and message integrity for secure browsing on the Internet?

• A.WEP
• B.EFS
• C.MS-CHAP v2
• D.SSL

A tester has been contracted to perform a penetration test for a corporate client. The scope of the test is limited to end-user workstations and client programs only. Which of die following actions is allowed in this test?

• A.Attempting to redirect the internal gateway through ARP poisoning
• B.Sniffing and attempting to crack the Domain Administrators password hash.
• C.Activating bot clients and performing a denial-of-service against the gateway.
• D.Sending a malicious pdf to a user and exploiting a vulnerable Reader version.