Scores tell the truth about readiness, and every simulated GPEN session at GuideTorrent ends with a result you can act on: review any question, spot your weak domains in the GIAC Certified Penetration Tester outline, and plan the next round of study accordingly.
GIAC GPEN Exam Overview:
| Certification Vendor: | GIAC (Global Information Assurance Certification) |
|---|---|
| Exam Name: | GIAC Penetration Tester Certification Exam |
| Exam Number: | GPEN |
| Certificate Validity Period: | 4 years |
| Related Certifications: | GCIH GWAPT GXPN GSEC |
| Exam Price: | $979 USD (exam only); $2,499 USD (challenge exam) |
| Passing Score: | 73% |
| Real Exam Qty: | 82 |
| Available Languages: | English |
| Exam Format: | Multiple-choice, Open-book (printed materials allowed), Scenario-based, Proctored |
| Exam Duration: | 180 minutes |
| Recommended Training: | SANS SEC560: Enterprise Penetration Testing |
| Exam Registration: | GIAC Official Registration |
| Sample Questions: |  |
| Exam Way: | Web-based proctored exam; remote proctoring via ProctorU or onsite via Pearson VUE |
| Pre Condition: | No mandatory prerequisites; recommended 2+ years of information security or penetration testing experience |
| Official Syllabus URL: | https://www.giac.org/certifications/penetration-tester-gpen |
GIAC GPEN Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Post-Exploitation, Pivoting & AD Attacks | 15% | - Lateral movement and pivoting - Privilege escalation (Windows/Linux) - Persistence and command & control - Active Directory and Kerberos attacks |
| Reconnaissance & OSINT | 15% | - Passive information gathering - DNS, WHOIS and infrastructure mapping - Active reconnaissance techniques |
| Scanning & Enumeration | 20% | - Network scanning and host discovery - Web and application scanning - Service and vulnerability enumeration |
| Exploitation Techniques | 25% | - Network and system exploitation - Web and application exploitation - Metasploit and exploitation frameworks - Password attacks and credential harvesting |
| Reporting & Remediation | 10% | - Report structure and executive summary - Remediation recommendations - Risk scoring and CVSS |
| Penetration Testing Planning, Scoping & Legal Considerations | 15% | - Define scope and rules of engagement - Testing methodologies and standards - Legal, compliance and ethical frameworks |
Preparing for GPEN on a Busy Schedule
- Reporting & Remediation (10%)
- Exploitation Techniques (25%)
- Scanning & Enumeration (20%)
GIAC Certified Penetration Tester Sample Questions:
Which of the following is a web ripping tool?
- A. SuperScan
- B. Netcat
- C. NetBus
- D. Black Widow
Correct Answer: D π³οΈ
You work as a Network Administrator for Tech Perfect Inc. The company has a Windows Active Directory-based single domain single forest network. The functional level of the forest is Windows Server 2003. The company has recently provided laptops to its sales team members. You have configured access points in the network to enable a wireless network. The company's security policy states that all users using laptops must use smart cards for authentication. Which of the following authentication techniques will you use to implement the security policy of the company?
- A. IEEE 802.1X using EAP-TLS
- B. IEEE 802.1X using PEAP-MS-CHAP
- C. Pre-shared key
- D. Open system
Correct Answer: A π³οΈ
What is the maximum limit of the file size that a user can upload according to the code snippet given below?
<form enctype="multipart/form-data" action="index.php" method="post">
<input type="hidden" name="MAX_FILE_SIZE" value="5000? />
<input name="filedata" type="file" />
<input type="submit" value="Send file" />
</form>
- A. 5,000 Kilobytes
- B. 5,000 bytes
- C. 5,000 Megabytes
- D. 5,000 bits
Correct Answer: B π³οΈ
Which of the following statements are true about SSIDs?
Each correct answer represents a complete solution. Choose all that apply.
- A. All wireless devices on a wireless network must have the same SSID in order to communicate with each other.
- B. SSID is used to identify a wireless network.
- C. Configuring the same SSID as that of the other Wireless Access Points (WAPs) of other networks will create a conflict.
- D. SSIDs are case insensitive text strings and have a maximum length of 64 characters.
Correct Answer: A,B,C π³οΈ
Which of the following statements are true about the Enum tool?
Each correct answer represents a complete solution. Choose all that apply.
- A. It is capable of performing brute force and dictionary attacks on individual accounts of Windows NT/2000.
- B. It is a console-based Win32 information enumeration utility.
- C. One of the countermeasures against the Enum tool is to disable TCP port 139/445.
- D. It uses NULL and User sessions to retrieve user lists, machine lists, LSA policy information, etc.
Correct Answer: A,B,C,D π³οΈ
Viewing page 1 out of 81 pages.
Viewing questions 1-5 out of 405 questions.
