GIAC Penetration Tester (GPEN)
Domain 1Objective 3
Scanning and Host Discovery GPEN Practice Questions (Page 8)
Part of the Penetration Testing Foundations domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~17–29 in this domain), expect 4–7 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)
43questions here
9free pages
7concepts
Questions 36–40
- 36
A tester runs the following Nmap command: nmap -sS -sV -p 1-1000 192.168.1.10. The output shows port 22/tcp open ssh, port 80/tcp open http, and port 443/tcp open https. Which of the following is the most likely next step for the tester?
Select an answer first - 37
A penetration tester is scanning a network that has a mix of hosts that block ICMP echo requests and hosts that respond normally. The tester wants to ensure that all live hosts are discovered while minimizing the number of packets sent. Which Nmap command should be used?
Select an answer first - 38
A penetration tester is performing a scan against a target that has an intrusion detection system (IDS) that triggers on rapid port scans. The tester wants to reduce the chance of detection while still completing the scan in a reasonable time. Which Nmap option should the tester use?
Select an answer first - 39
A penetration tester has identified an open port on a target and needs to determine the service version to check for known vulnerabilities. The tester wants to use Nmap's default version detection intensity to balance speed and accuracy. Which command should the tester use?
Select an answer first - 40
Which scan type sends a UDP packet to a port and interprets an ICMP Port Unreachable response as an indication that the port is closed?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPEN” is a trademark of its owner, used for identification only.