GIAC Penetration Tester (GPEN)
Domain 1Objective 3
Scanning and Host Discovery GPEN Practice Questions (Page 9)
Part of the Penetration Testing Foundations domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~17–29 in this domain), expect 4–7 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)
43questions here
9free pages
7concepts
Questions 41–43
- 41
Which port scanning technique completes the full TCP three-way handshake and is therefore the most reliable but also the most likely to be logged by the target?
Select an answer first - 42
Which TCP-based host discovery technique sends a SYN packet to a common port and considers the host alive if it receives a SYN-ACK or RST response?
Select an answer first - 43
In an Nmap scan output, what does the 'open' state of a port indicate?
Select an answer first
Finished these 3 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to GPEN
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPEN” is a trademark of its owner, used for identification only.