GIAC Penetration Tester (GPEN)
Domain 2Objective 2
Escalation and Exploitation GPEN Practice Questions (Page 3)
Part of the Exploitation and Post-Exploitation domain, which makes up ~22% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–26 in this domain), expect 4–7 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)
38questions here
8free pages
8concepts
Questions 11–15
- 11
In Metasploit, which component is used to define a specific attack against a vulnerable service?
Select an answer first - 12
Which of the following is a basic evasion technique that involves deleting or modifying logs to remove traces of an attack?
Select an answer first - 13
Which of the following is a common vector for privilege escalation on a Linux system?
Select an answer first - 14
Which Metasploit command is used to select a specific exploit module for use?
Select an answer first - 15
Which phase of the post-exploitation methodology involves gathering information about the compromised system, such as user accounts, network shares, and running processes?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPEN” is a trademark of its owner, used for identification only.