nerdexam
GIAC

GSLC · Question #52

Which of the following are the automated tools that are used to perform penetration testing? Each correct answer represents a complete solution. Choose two.

The correct answer is C. GFI LANguard D. Nessus. GFI LANguard and Nessus are both comprehensive automated vulnerability scanners used to perform penetration testing assessments across networks.

Security Operations & Incident Response Leadership

Question

Which of the following are the automated tools that are used to perform penetration testing? Each correct answer represents a complete solution. Choose two.

Options

  • APwdump
  • BEtherApe
  • CGFI LANguard
  • DNessus

How the community answered

(58 responses)
  • A
    9% (5)
  • B
    3% (2)
  • C
    88% (51)

Why each option

GFI LANguard and Nessus are both comprehensive automated vulnerability scanners used to perform penetration testing assessments across networks.

APwdump

Pwdump is a Windows credential extraction tool that dumps NTLM password hashes from the SAM database - it is a targeted post-exploitation tool, not a broad automated penetration testing platform.

BEtherApe

EtherApe is a passive graphical network traffic monitoring and visualization tool used for observing network activity, not an active scanner for automated penetration testing.

CGFI LANguardCorrect

GFI LANguard is an automated network security scanner that performs vulnerability assessments, patch auditing, and network device discovery, making it a recognized automated penetration testing tool.

DNessusCorrect

Nessus, developed by Tenable, is one of the most widely deployed automated vulnerability scanners in penetration testing, capable of identifying misconfigurations, missing patches, open ports, and exploitable vulnerabilities across a network at scale.

Concept tested: Automated vulnerability scanning tools used in penetration testing

Source: https://www.tenable.com/products/nessus

Topics

#penetration testing#Nessus#GFI LANguard#vulnerability scanning

Community Discussion

No community discussion yet for this question.

Full GSLC Practice