MENU
You want to retrieve password files (stored in the Web server's index directory) from various Web sites. Which of the following tools can you use to accomplish the task?
Suggested Answer: D
Get Premium GPEN Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
43 comments · newest first
YO
Youlanda
10 months ago
Wait, can you really get password files like that? Sounds sketchy!
LU
Luis
11 months ago
I thought Sam Spade was outdated?
AS
Ashley
11 months ago
Definitely not using Whois for that!
TU
Tuyet
11 months ago
Nmap is more for scanning, not retrieving files.
JU
Justa
11 months ago
Google can help find exposed files.
BE
Bernadine
11 months ago
I’m confused about Sam Spade; I thought it was more for network analysis rather than retrieving files.
JA
Janine
12 months ago
I feel like I've seen a similar question before, and Google was definitely the answer there too.
RE
Rebbeca
12 months ago
I'm not entirely sure, but I remember Nmap is more for network scanning, not file retrieval.
CA
Carman
12 months ago
I think Google might be the right choice since it can help find specific files indexed on websites.
LE
Lenna
12 months ago
I think Nmap would be the best tool for this task. It can help me identify web servers and their directory structures to locate the password files.
ST
Stefania
12 months ago
I'm a bit confused by this question. Wouldn't using a search engine like Google be the easiest way to find password files? I'll have to consider the ethical implications of that approach.
TH
Theron
1 year ago
Sam spade seems like the obvious choice here. It's a powerful tool for web application security testing, including retrieving sensitive files.
DO
Dominque
1 year ago
Hmm, I'm not sure which tool would be the most appropriate here. I'll need to review my notes on network scanning and information gathering techniques.
SO
Sommer
1 year ago
This looks like a tricky question. I'll need to think carefully about the different tools and their capabilities to determine the best one for retrieving password files.
CA
Candida
1 year ago
I feel pretty confident about this one. The architect should recommend host isolation response to exclude the no-mirror VMs, using isolation addresses in both sites, and leveraging the witness appliance to maintain availability.
RO
Rosita
2 years ago
I think Whois could also be useful in this scenario to retrieve password files.
MI
Mireya
2 years ago
C) Whois? Isn't that what you use to find out who owns a domain? I think we're missing the point here.
CR
Craig
2 years ago
A) Sam spade
SH
Shawnda
2 years ago
C) Oh, I see. So Whois can be a useful tool for this task after all.
DE
Denae
2 years ago
D) Google
GL
Gladys
2 years ago
C) Whois
LO
Lonna
2 years ago
B) Nmap
PA
Pamella
2 years ago
A) Sam spade
PE
Penney
2 years ago
C) Yes, Whois is typically used to find out domain ownership. But in this case, it can also be used to retrieve password files from Web server directories.
LA
Lajuana
2 years ago
D) Google
LO
Lonny
2 years ago
C) Whois
LE
Lemuel
2 years ago
B) Nmap
AL
Aliza
2 years ago
A) Sam spade
LI
Ling
2 years ago
I agree with Barbra, Nmap is a good choice for retrieving password files.
FL
Fletcher
2 years ago
A) Sam spade sounds like the name of a private investigator from the 1940s. I'm intrigued!
WA
Walton
2 years ago
B) Nmap is a great tool for scanning networks and finding vulnerabilities.
AL
Alonzo
2 years ago
A) Sam spade does sound like a detective name, but it's actually a tool for retrieving password files.
NI
Nilsa
2 years ago
I'm not sure about Nmap, I think Google might be a better option.
FR
Francine
2 years ago
D) Google? Are you kidding me? I'd rather ask the cat next door for tech advice.
YO
Yolando
2 years ago
B) Nmap? Really? That's like using a sledgehammer to crack a nut. Let's be more surgical, shall we?
LE
Leonora
2 years ago
C) Whois might also be a good choice for retrieving password files.
LE
Levi
2 years ago
A) Sam spade sounds like a better option for this task.
BA
Barbra
2 years ago
I think we can use Nmap for this task.
VI
Virgie
2 years ago
A) Sam spade looks like the obvious choice here. Who doesn't love a good spider-themed tool?
RO
Rodrigo
2 years ago
D) Google might have some information as well.
CA
Cassie
2 years ago
C) Whois could be helpful in this situation.
BR
Broderick
2 years ago
B) Nmap might also work for this.
EU
Eun
2 years ago
A) Sam spade is a great tool for that.