We're so confident of our products that we provide no hassle product exchange.
GIAC Exploit Researcher and Advanced Penetration Tester Sample Questions:
1. In a client exploitation scenario, which Windows tool is often used to bypass user account control (UAC)?
Response:
A) Mimikatz
B) Burp Suite
C) Scapy
D) UACMe
2. What does the term SEH (Structured Exception Handling) refer to in the context of Windows exploitation?
Response:
A) A feature to manage exceptions that can be leveraged in exploitation
B) A system to ensure memory protection on Windows
C) A technique for brute-forcing user credentials
D) A method for handling memory leaks
3. In the context of network manipulation, what is the primary goal of privilege escalation attacks?
Response:
A) To gain unauthorized access to system resources
B) To perform data validation
C) To disrupt network services
D) To encrypt network traffic
4. You are exploiting a stack overflow vulnerability in a vulnerable program. Which approach would you take to successfully exploit the vulnerability?
Response:
A) Perform a brute-force attack to guess the return address
B) Modify the heap to execute arbitrary code
C) Inject SQL commands directly into the stack
D) Overwrite the return address with the address of your shellcode
5. Which of the following methods are effective for bypassing network segmentation in enterprise environments?
(Choose Two)
Response:
A) VLAN hopping
B) DNS cache poisoning
C) SSL/TLS stripping
D) Route injection attacks
Solutions:
| Question # 1 Answer: D | Question # 2 Answer: A | Question # 3 Answer: A | Question # 4 Answer: D | Question # 5 Answer: A,D |
By Leona
