Free GIAC GXPN Exam Dumps Questions & Answers

How does fuzzing contribute to software development?
Response:

• A.  By enhancing software feature sets
• B.  By increasing user interface friendliness
• C.  By reducing software licensing costs
• D.  By identifying security vulnerabilities before deployment

Which two techniques are commonly used to prevent stack smashing attacks?
(Choose Two)
Response:

• A.  Address Space Layout Randomization (ASLR)
• B.  Stack canaries
• C.  Disabling debugging symbols
• D.  Using static memory allocation

What is the function of Windows Heap protections that complicates exploitation?
Response:

• A.  Logging heap allocations and deallocations
• B.  Using randomized addresses for heap allocation
• C.  Encrypting heap data
• D.  Segmenting the heap into multiple sub-heaps

What method can an advanced penetration tester use to evade port-based NAC systems?
Response:

• A.  Tunneling traffic through allowed ports
• B.  Encryption of traffic
• C.  DHCP spoofing
• D.  Port scanning

What is a typical use case for the sr1() function in Scapy?
Response:

• A.  To generate random packet data
• B.  To visualize packet flow
• C.  To send a packet and receive its answer
• D.  To log packet data to a file