GIAC Certification GIAC Certified Penetration Tester 2

Question 1

What type of scan does Nmap perform when using the -sS flag?

Accepted Answer

SYN stealth scan

Answer

Full TCP connect scan

Answer

UDP scan

Answer

OS fingerprinting scan

Question 2

During a penetration test, which phase involves gathering information about the target without actively probing systems?

Accepted Answer

Passive reconnaissance

Answer

Exploitation

Answer

Post-exploitation

Answer

Vulnerability scanning

Question 3

Which attack exploits NTLM authentication by responding to broadcast name-resolution requests with the attacker's IP address?

Accepted Answer

LLMNR Poisoning

Answer

ARP Spoofing

Answer

DNS Cache Poisoning

Answer

BGP Hijacking

Question 4

What is the GPEN exam format in terms of question count and passing score?

Accepted Answer

115 questions, 71% passing

Answer

100 questions, 74% passing

Answer

75 questions, 70% passing

Answer

150 questions, 80% passing

Question 5

Which post-exploitation technique involves extracting credentials from Windows memory using a tool like Mimikatz?

Accepted Answer

Credential dumping

Answer

Pivoting

Answer

Privilege escalation

Answer

Persistence

Question 6

What is the purpose of a 'pivot' during penetration testing?

Accepted Answer

Using a compromised host to attack internal network segments

Answer

Escalating privileges on the current host

Answer

Evading antivirus detection

Answer

Maintaining persistence after reboot