最新的GIAC GXPN免費考試真題

問題1

Which two techniques can help prevent stack smashing exploits?
(Choose Two)
Response:

A. Avoiding memory dumps

B. Using static memory allocation

C. Stack canaries

D. Data Execution Prevention (DEP)

正確答案: C,D

問題2

How can a penetration tester exploit weak hash functions in a cryptographic system?
Response:

A. By reverse engineering the hash

B. By performing a MITM attack

C. By brute-forcing the hash

D. By generating hash collisions

正確答案: D

問題3

Which of the following mitigations is designed to prevent stack smashing attacks?
Response:

A. ASLR

B. Return-oriented programming

C. Buffer allocation

D. Stack canaries

正確答案: D

問題4

What does the term SEH (Structured Exception Handling) refer to in the context of Windows exploitation?
Response:

A. A system to ensure memory protection on Windows

B. A technique for brute-forcing user credentials

C. A method for handling memory leaks

D. A feature to manage exceptions that can be leveraged in exploitation

正確答案: D

問題5

In Scapy, what function is used to send packets at the network layer?
Response:

A. send()

B. dispatch()

C. transmit()

D. sendp()

正確答案: A

問題6

What is a key security feature in Windows operating systems designed to mitigate buffer overflow attacks?
Response:

A. Filesystem Encryption

B. User Account Control (UAC)

C. Data Execution Prevention (DEP)

D. BitLocker

正確答案: C

問題7

What common attack vector targets both network protocols and client systems effectively?
Response:

A. Distributed Denial of Service (DDoS)

B. Man-in-the-middle (MITM) attacks

C. Cross-site scripting (XSS)

D. SQL Injection

正確答案: B

問題8

Which of the following techniques is commonly used to bypass Data Execution Prevention (DEP) on Windows systems?
Response:

A. Heap spraying

B. Return-Oriented Programming (ROP)

C. Stack canary brute-forcing

D. Buffer overread

正確答案: B

問題9

Which of the following cryptographic attacks targets RSA (Rivest-Shamir-Adleman) encryption by exploiting weak keys?
Response:

A. Rainbow table attack

B. Chosen plaintext attack

C. Bleichenbacher's attack

D. Integer overflow

正確答案: C

問題10

What is a key challenge when writing exploits against stack-protected programs using ASLR (Address Space Layout Randomization)?
Response:

A. Locating the base address of the stack

B. Disabling the NX bit

C. Bypassing brute-force protection

D. Preventing integer overflows

正確答案: A

最新的GIAC Exploit Researcher and Advanced Penetration Tester - GXPN免費考試真題

聯系我們

站內鏈接

最新更新