Online Access Free GXPN Exam Questions

How do DEP (Data Execution Prevention) and ASLR (Address Space Layout Randomization) complicate exploitation of Windows stack overflows?
Response:

• A.They reduce the efficiency of garbage collection
• B.DEP prevents execution of code from non-executable memory regions
• C.Both mechanisms encrypt data on the stack
• D.ASLR randomizes the addresses of stack, heap, and libraries

During a penetration test, you want to redirect network traffic through your machine without disrupting services. Which of the following methods would you use?
Response:

• A.Perform a brute-force attack on the router's admin credentials
• B.Launch a buffer overflow attack on the network gateway
• C.Use ARP poisoning to perform a man-in-the-middle (MITM) attack
• D.Spoof a DNS server to reroute traffic

Which of the following techniques can be used to defeat stack canaries in a stack smashing exploit?
Response:

• A.Canary brute-forcing
• B.Stack pivoting
• C.Heap spraying
• D.Return-to-libc attacks

What type of network attack could allow an attacker to intercept data between two parties without their knowledge?
Response:

• A.Cross-Site Scripting (XSS)
• B.Man-in-the-Middle (MITM) Attack
• C.Denial of Service (DoS) Attack
• D.SQL Injection

In a Python script, how can you use Scapy to send a crafted TCP packet with a spoofed source IP address?
Response:

• A.packet_send("spoof")
• B.craft_packet(IP_source="spoofed")
• C.send(IP(src="1.2.3.4")/TCP())
• D.send_spoof("IP")