GPEN Exam Dumps - GIAC Security Administration Questions and Answers

You work as a Penetration Tester for the Infosec Inc. Your company takes the projects of security auditing. Recently, your company has assigned you a project to test the security of the we-aresecure. com Web site. For this, you want to perform the idle scan so that you can get the ports open in the we-are-secure.com server. You are using Hping tool to perform the idle scan by using a zombie computer. While scanning, you notice that every IPID is being incremented on every query, regardless whether the ports are open or close. Sometimes, IPID is being incremented by more than one value. What may be the reason?

Which of the following attacks can be overcome by applying cryptography?

Which of the following does NOT use a proxy software to protect users?

In which of the following attacks does an attacker use packet sniffing to read network traffic between two parties to steal the session cookie?

You want to run the nmap command that includes the host specification of 202.176.56-57.*. How many hosts will you scan?

In which layer of the OSI model does a sniffer operate?

How many bits encryption does SHA-1 use?

Which of the following tools is a wireless sniffer and analyzer that works on the Windows operating system?

You work as a Network Administrator in the Secure Inc. You often need to send PDF documents that contain secret information, such as, client password, their credit card details, email passwords, etc. through email to your customers. However, you are making PDFs password protected you are getting complaints from customers that their secret information is being misused. When you analyze this complaint you get that however you are applying the passwords on PDFs, they are not providing the maximum protection. What may be the cause of this security hole?

What is the sequence in which packets are sent when establishing a connection to a secured network?