GIAC Certification GIAC Certified Penetration Tester

Question 1

Which GIAC certification validates skills in conducting authorized penetration tests using hacking techniques and methodologies?

Accepted Answer

GPEN

Answer

The GIAC Certified Penetration Tester (GPEN) certifies professionals in conducting authorized penetration tests using attack techniques.

Question 2

During a GPEN-level penetration test, which tool is most commonly used for password cracking via brute force?

Accepted Answer

Hashcat

Answer

Hashcat is the industry-standard GPU-accelerated password cracking tool used during penetration tests.

Question 3

What technique involves requesting a Kerberos service ticket to later crack the service account password offline?

Accepted Answer

Kerberoasting

Answer

Kerberoasting requests TGS tickets for service accounts and cracks them offline to reveal plaintext passwords.

Question 4

Which Metasploit module type is used to deliver a payload after an exploit successfully compromises a target?

Accepted Answer

Payload

Answer

Metasploit payloads are the code executed on a target system after a successful exploit, such as a reverse shell.

Question 5

What is the primary purpose of a penetration test scoping document?

Accepted Answer

To define authorized targets, methods, and timeframes

Answer

A scoping document defines the rules of engagement, including authorized IP ranges, allowed attack methods, and testing windows.

GIAC Certification Practice Test