GIAC Certification GIAC Exploit Researcher and Advanced Penetration Tester

Question 1

Which GIAC certification validates skills in advanced exploit development, including writing shellcode and bypassing memory protections?

Accepted Answer

GXPN

Answer

GPEN

Answer

GWAPT

Answer

GCFA

Question 2

What memory protection mechanism randomizes the base addresses of executable code, stack, and heap to make exploitation harder?

Accepted Answer

ASLR

Answer

DEP/NX

Answer

Stack Canaries

Answer

CFI

Question 3

What exploit technique uses a sequence of existing executable code snippets (gadgets) ending in RET instructions to bypass DEP/NX?

Accepted Answer

Return-Oriented Programming (ROP)

Answer

Heap spraying

Answer

Stack smashing

Answer

Format string attack

Question 4

What type of vulnerability allows an attacker to write data beyond the end of a fixed-size buffer in memory?

Accepted Answer

Stack-based buffer overflow

Answer

Use-after-free

Answer

Integer overflow

Answer

Format string vulnerability

Question 5

What memory corruption vulnerability occurs when a program continues to use a pointer after the memory it points to has been freed?

Accepted Answer

Use-after-free (UAF)

Answer

Buffer overflow

Answer

Double free

Answer

Null pointer dereference

Question 6

What is fuzzing in the context of exploit research?

Accepted Answer

Automatically generating malformed input to discover software crashes and vulnerabilities

Answer

Obfuscating shellcode to evade antivirus

Answer

Analyzing binary code without source code

Answer

Emulating CPU instructions for debugging