Free GIAC GPEN Exam Dumps Questions & Answers

You are sending a file to an FTP server. The file will be broken into several pieces of information packets (segments) and will be sent to the server. The file will again be reassembled and reconstructed once the packets reach the FTP server. Which of the following information should be used to maintain the correct order of information packets during the reconstruction of the file?

• A.  Acknowledge number
• B.  Checksum
• C.  TTL
• D.  Sequence number

Which of the following tools is an automated tool that is used to implement SQL injections and to retrieve data from Web server databases?

• A.  ADMutate
• B.  Absinthe
• C.  Fragroute
• D.  Stick

Analyze the output of the two commands below:


Which of the following can be factually inferred from the results of these commands?

• A.  The router 10 63.104 206 is dropping ICMP traceroute.
• B.  The router 192.16S.U6.1 is filtering UDP traceroute.
• C.  The host 10.63.104.1 is silently dropping UDP packets.
• D.  The host 10.63.104.1 is not issuing ICMP packets.

John works as a professional Ethical Hacker. He has been assigned the project of testing the security of www.we-are-secure.com. He performs a Teardrop attack on the we-are-secure server and observes that the server crashes. Which of the following is the most likely cause of the server crash?

• A.  The we-are-secure server cannot handle the overlapping data fragments.
• B.  The ICMP packet is larger than 65,536 bytes.
• C.  Ping requests at the server are too high.
• D.  The spoofed TCP SYN packet containing the IP address of the target is filled in both the source and destination fields.

John works as a Penetration Tester in a security service providing firm named you-are-secure Inc.
Recently, John's company has got a project to test the security of a promotional Website www.missatlanta.com and assigned the pen-testing work to John. When John is performing penetration testing, he inserts the following script in the search box at the company home page:
<script>alert('Hi, John')</script>
After pressing the search button, a pop-up box appears on his screen with the text - "Hi, John." Which of the following attacks can be performed on the Web site tested by john while considering the above scenario?

• A.  Buffer overflow attack
• B.  Replay attack
• C.  CSRF attack
• D.  XSS attack