GIAC Certified Penetration Tester GPEN Exam Questions

Which of the following attacks allows an attacker to recover the key in an RC4 encrypted stream from a large number of messages in that stream?

Which of the following tools connects to and executes files on remote systems?

Wired Equivalent Privacy (WEP) is a security protocol for wireless local area networks (WLANs). It has two components, authentication and encryption. It provides security equivalent to wired networks for wireless networks. WEP encrypts data on a wireless network by using a fixed secret key. Which of the following statements are true about WEP?

Each correct answer represents a complete solution. Choose all that apply.

You are using the dsniff tool to intercept communications between two entities and establish

credentials with both sides of the connections. These entities do not notice that you were

retrieving the information between these two. Which of the following attacks are you performing?

If a password is seven characters or less, the second half of the LM hash is always

___________________.

Which of the following tools is used to make fake authentication certificates?

John works as a professional Ethical Hacker. He has been assigned a project to test the security of www.we-are-secure.com. He successfully performs a brute force attack on the We-are-secure server. Now, he suggests some countermeasures to avoid such brute force attacks on the We-aresecure server. Which of the following are countermeasures against a brute force attack?

Each correct answer represents a complete solution. Choose all that apply.