GIAC GPEN dumps - 100% Pass Guarantee!

Why is OSSTMM beneficial to the pen tester?

A. It provides a legal and contractual framework for testing

B. It provides in-depth knowledge on tools

C. It provides report templates

D. It includes an automated testing engine similar to Metasploit

You've been contracted by the owner of a secure facility to try and break into their office in the middle of the night. Your client requested photographs of any sensitive information found as proof of your accomplishments. The job you've been hired to perform is an example of what practice?

A. Penetration Testing

B. Ethical Hacking

C. Vulnerability Assessing

D. Security Auditing

You work as a Network Administrator in the Secure Inc. You often need to send PDF documents that contain secret information, such as, client password, their credit card details, email passwords, etc. through email to your customers. However, you are making PDFs password protected you are getting complaints from customers that their secret information is being misused. When you analyze this complaint you get that however you are applying the passwords on PDFs, they are not providing the maximum protection. What may be the cause of this security hole?

A. PDFs can be read easily in the plain-text form by applying a sniffer.

B. PDFs are sent in email in the plain-text form.

C. PDF passwords can easily be cracked by brute force attacks.

D. You are applying easily guessed passwords.

You run the following bash script in Linux:

for i in 'cat hostlist.txt' ;do nc -q 2 -v $i 80 < request.txt done where, hostlist.txt file contains the list of IP addresses and request.txt is the output file.

Which of the following tasks do you want to perform by running this script?

A. You want to perform port scanning to the hosts given in the IP address list.

B. You want to transfer file hostlist.txt to the hosts given in the IP address list.

C. You want to perform banner grabbing to the hosts given in the IP address list.

D. You want to put nmap in the listen mode to the hosts given in the IP address list.

Which of the following tools is not a BlueSnarf attacking tool?

A. Blooover

B. Redsnarf

C. BlueSnarfer

D. Freejack