GIAC Certification GIAC Certified Penetration Tester

Question 1

Which GIAC certification validates skills in conducting authorized penetration tests using hacking techniques and methodologies?

Accepted Answer

GPEN

Answer

GCIH

Answer

GCFA

Answer

GSEC

Question 2

During a GPEN-level penetration test, which tool is most commonly used for password cracking via brute force?

Accepted Answer

Hashcat

Answer

Nmap

Answer

Wireshark

Answer

Burp Suite

Question 3

What technique involves requesting a Kerberos service ticket to later crack the service account password offline?

Accepted Answer

Kerberoasting

Answer

Pass-the-Hash

Answer

Silver Ticket Attack

Answer

AS-REP Roasting

Question 4

Which Metasploit module type is used to deliver a payload after an exploit successfully compromises a target?

Accepted Answer

Payload

Answer

Auxiliary

Answer

Encoder

Answer

Post

Question 5

What is the primary purpose of a penetration test scoping document?

Accepted Answer

To define authorized targets, methods, and timeframes

Answer

To list all vulnerabilities found

Answer

To document remediation steps

Answer

To assign CVSS scores to findings

Question 6

Which technique allows an attacker to move laterally in a Windows environment using captured NTLM hash values without cracking them?

Accepted Answer

Pass-the-Hash

Answer

Kerberoasting

Answer

Token Impersonation

Answer

LLMNR Poisoning