Free GIAC GXPN Exam Dumps Questions & Answers

How can DNS spoofing be used in network manipulation to gain escalated privileges?
Response:

• A.By corrupting the DNS cache
• B.By redirecting users to malicious websites
• C.By stealing DNS credentials
• D.By overloading the DNS server

Which of the following are techniques used to avoid null bytes in Linux shellcode?
(Choose Two)
Response:

• A.Employing syscall wrappers
• B.Encoding the payload
• C.Replacing null bytes with non-zero values manually
• D.Using XOR operations

In client environment exploitation, what role does the exploitation of third-party applications play?
Response:

• A.It is typically used to gain initial access
• B.It is used primarily for data exfiltration
• C.It is employed mainly for lateral movement
• D.It is irrelevant in modern environments

Which memory protection mechanism prevents the execution of code on the stack, mitigating buffer overflow attacks?
Response:

• A.ASLR
• B.DEP (Data Execution Prevention)
• C.Stack canaries
• D.NX (No-eXecute) bit

What is a typical first step when writing an exploit for a stack-based buffer overflow?
Response:

• A.Disable DEP using system calls
• B.Perform a dictionary attack on the application
• C.Bypass ASLR protections
• D.Identify the offset at which the return address is overwritten