GXPN by GIAC Actual Free Exam Q&As

Question 1

Which of the following is a common technique used to bypass Address Space Layout Randomization (ASLR) on Windows?
Response:

A. Heap spraying B. DLL hijacking C. Return-oriented programming (ROP) D. Stack canaries

Discussion 0

Correct Answer: C Vote an answer

Question 2

In Linux, which type of memory is primarily used to store global and static variables?
Response:

A. Data segment B. Heap C. Stack D. Register

Discussion 0

Correct Answer: A Vote an answer

Question 3

Which of the following describes protocol fuzzing?
Response:

A. A method of analyzing encrypted network traffic B. A method used for password brute-forcing C. A technique that modifies the behavior of network services D. A testing approach that sends malformed data to network protocols

Discussion 0

Correct Answer: D Vote an answer

Question 4

What is the primary mechanism by which stack overflow attacks achieve code execution?
Response:

A. By overriding the return address on the stack B. By corrupting memory allocation metadata C. By overwriting local variables D. By flooding the stack with NOP sleds

Discussion 0

Correct Answer: A Vote an answer

Question 5

What are two common mitigation techniques used in Windows to prevent buffer overflow attacks?
(Choose Two)
Response:

A. Disabling user access control (UAC) B. Address Space Layout Randomization (ASLR) C. Code signing D. Stack canaries

Discussion 0

Correct Answer: B,D Vote an answer

Question 6

You are exploiting a stack overflow vulnerability in a vulnerable program. Which approach would you take to successfully exploit the vulnerability?
Response:

A. Overwrite the return address with the address of your shellcode B. Inject SQL commands directly into the stack C. Perform a brute-force attack to guess the return address D. Modify the heap to execute arbitrary code

Discussion 0

Correct Answer: A Vote an answer

Question 7

How does understanding assembly language benefit a penetration tester working with Linux systems?
Response:

A. It facilitates the development of graphical interfaces. B. It aids in the analysis and exploitation of binary vulnerabilities. C. It allows the tester to write more effective user documentation. D. It enables the tester to directly manipulate hardware features.

Discussion 0

Correct Answer: B Vote an answer

Question 8

What is a critical consideration when identifying ways to improve a fuzzer?
Response:

A. Scaling the fuzzer to support distributed testing B. Minimizing the cost of test environment setup C. Integrating automated source code analysis tools D. Ensuring compatibility with older software versions

Discussion 0

Correct Answer: A Vote an answer

Question 9

What is shellcode primarily used for in exploitation?
Response:

A. Executing arbitrary code after exploiting a vulnerability B. Automating system administration tasks C. Encrypting data to prevent unauthorized access D. Creating secure shell sessions

Discussion 0

Correct Answer: A Vote an answer

Question 10

In a buffer overflow attack, what part of the stack is typically targeted to gain control of execution flow?
Response:

A. Return address B. Heap C. Frame pointer D. Stack pointer

Discussion 0

Correct Answer: A Vote an answer

Question 11

Which of the following network vulnerabilities can be exploited to perform a man-in-the-middle (MITM) attack?
Response:

A. IP spoofing B. Buffer overflow C. ARP cache poisoning D. SQL injection

Discussion 0

Correct Answer: C Vote an answer

Question 12

Which two techniques are commonly used to obfuscate shellcode?
(Choose Two)
Response:

A. XOR encoding B. Using clear text payloads C. Disabling error logging D. Base64 encoding

Discussion 0

Correct Answer: A,D Vote an answer

Question 13

What is the purpose of encoding shellcode during a penetration test?
Response:

A. To bypass intrusion detection systems (IDS) and antivirus software B. To increase the complexity of the exploit C. To decrypt secure communication channels D. To compress the payload for faster transmission

Discussion 0

Correct Answer: A Vote an answer

Question 14

How can an exploit writer overcome Address Space Layout Randomization (ASLR) while creating a stack smashing attack?
Response:

A. By using hard-coded memory addresses B. Using brute force to guess addresses C. Implementing polymorphic code D. Employing a heap spray technique

Discussion 0

Correct Answer: D Vote an answer

GIAC Exploit Researcher and Advanced Penetration Tester - GXPN Exam Practice Test