A penetration tester is planning an engagement for a client that wants to measure the effectiveness of its security controls. The client has asked for a test that will provide a clear indication of whether the current defenses can be bypassed. Which success criteria would best measure the effectiveness of the security controls?

The tester identifies at least 10 vulnerabilities across the target environment.

The tester successfully gains access to a critical internal system and maintains persistence for at least 24 hours without detection.

The tester produces a report with detailed remediation recommendations for all identified issues.

The tester completes all planned test phases within the allocated time and budget.

A penetration tester is preparing for an engagement against a manufacturing company's OT network. The rules of engagement specify that testing is limited to non-destructive techniques and must not disrupt production systems. The tester discovers that a specific SCADA protocol service is running on a target and that a known exploit against it could cause a denial-of-service condition. What is the most appropriate action for the tester to take?

Pause the engagement and request an amendment to the rules of engagement to allow the denial-of-service test.

Run the exploit against a non-production replica of the SCADA system to validate the vulnerability without risking the live environment.

Document the vulnerability and the potential impact of the exploit in the final report without executing the denial-of-service payload.

Execute the exploit in a controlled manner during a scheduled maintenance window to demonstrate the full impact to the client.

Which of the following best describes a measurable success criterion for a penetration test?

The test was completed within the allocated time

The tester used the latest tools

The client was satisfied with the tester's communication

The tester successfully exploited at least one critical vulnerability

GIAC Penetration Tester (GPEN)

Domain 1Objective 1

Penetration Test Planning GPEN Practice Questions (Page 1)

Part of the Penetration Testing Foundations domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~17–29 in this domain), expect 4–7 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

7concepts

Questions 1–5

1application · medium
A penetration tester is planning an engagement for a client that wants to measure the effectiveness of its security controls. The client has asked for a test that will provide a clear indication of whether the current defenses can be bypassed. Which success criteria would best measure the effectiveness of the security controls?
Select an answer first
2foundation · easy
During which phase of a penetration test does the tester actively identify open ports, running services, and potential vulnerabilities on the target systems?
Select an answer first
3application · medium
A penetration tester is preparing for an engagement against a manufacturing company's OT network. The rules of engagement specify that testing is limited to non-destructive techniques and must not disrupt production systems. The tester discovers that a specific SCADA protocol service is running on a target and that a known exploit against it could cause a denial-of-service condition. What is the most appropriate action for the tester to take?
Select an answer first
4foundation · easy
Which of the following best describes a measurable success criterion for a penetration test?
Select an answer first
5foundation · easy
A penetration tester is asked to simulate an external attacker who has no prior knowledge of the target network. The tester is only given the company name and the target's public IP range. Which type of test is being performed?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GPEN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPEN” is a trademark of its owner, used for identification only.

Penetration Test Planning GPEN Practice Questions (Page 1)

Questions 1–5

During which phase of a penetration test does the tester actively identify open ports, running services, and potential vulnerabilities on the target systems?

Which of the following best describes a measurable success criterion for a penetration test?

A penetration tester is asked to simulate an external attacker who has no prior knowledge of the target network. The tester is only given the company name and the target's public IP range. Which type of test is being performed?

Keep studying — Penetration Testing Foundations