GIAC GPEN Exam - Topic 10 Question 23 Discussion

Actual exam question for GIAC's GPEN exam

Question #: 23
Topic #: 10

[All GPEN Questions]

Which of the following techniques are NOT used to perform active OS fingerprinting?

Each correct answer represents a complete solution. Choose all that apply.

AICMP error message quoting

BAnalyzing email headers

CSniffing and analyzing packets

DSending FIN packets to open ports on the remote system

Show Suggested Answer

Suggested Answer: B, C

by Rebecka at May 07, 2022, 03:44 PM

Limited Time Offer

25%

Off

Get Premium GPEN Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Cortney

4 months ago

I thought sending FIN packets was more passive, interesting!

upvoted 0 times

...

Rikki

4 months ago

Wait, are we sure about A? Seems like it could be used.

upvoted 0 times

...

Jennifer

4 months ago

C is actually a common technique though.

upvoted 0 times

...

Ryan

4 months ago

I agree, B seems off.

upvoted 0 times

...

Vivan

5 months ago

B is definitely not active fingerprinting.

upvoted 0 times

...

Josephine

5 months ago

I feel like sending FIN packets is a common technique in active fingerprinting, but I can't recall if ICMP messages are used in that context.

upvoted 0 times

...

Alba

5 months ago

I practiced a similar question where we had to identify techniques for passive vs. active fingerprinting. I think option C is definitely active, but I’m not sure about A.

upvoted 0 times

...

Felicitas

5 months ago

I’m a bit unsure about option B. Analyzing email headers seems more related to email security than OS fingerprinting, but I could be wrong.

upvoted 0 times

...

Loreta

5 months ago

I remember that active OS fingerprinting involves sending specific packets to a target and analyzing the responses. I think options A and B might not fit that definition.

upvoted 0 times

...

Tegan

5 months ago

Okay, this seems like a standard definition question. I'll make sure to hit the main steps of decommissioning - planning, dismantling, processing hazardous waste, and proper disposal.

upvoted 0 times

...

Tiera

5 months ago

This looks like a pretty straightforward question. I think the fault handler can be attached at the process level and the scope level, so I'll select those two options.

upvoted 0 times

...

Vesta

5 months ago

Hmm, I'm not sure about this one. The question is asking about a specific aspect of the Peltz brand, but the options seem a bit broad. I'll have to think this through carefully.

upvoted 0 times

...