Reverse Engineering, Fuzzing, and Binary Exploitation CPENT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary goal of fuzzing in vulnerability discovery?

   • ATo monitor network traffic for malicious activity
   • BTo automatically generate malformed or unexpected inputs to trigger crashes or abnormal behavior
   • CTo encrypt the target application to protect it from attacks
   • DTo manually review source code for security flaws
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is shellcode in the context of binary exploitation?

   • AA script written in Bash that automates penetration testing tasks
   • BA small piece of machine code that is injected into a vulnerable program to execute a shell or other commands
   • CA type of malware that hides in the system shell
   • DA tool used to obfuscate binary code
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which technique is used to inspect a binary's code without executing it?

   • ADynamic analysis
   • BDebugging
   • CStatic analysis
   • DFuzzing
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A penetration tester finds a buffer overflow in a Linux service that is compiled with NX (non-executable stack) enabled and ASLR active. The tester wants to achieve code execution. Which technique is most appropriate?

   • AInject shellcode onto the stack and jump to it
   • BUse a format string vulnerability to write to the GOT
   • CUse a return-oriented programming (ROP) chain to call system()
   • DOverwrite the return address with a fixed address of the system() function
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is a common static analysis tool for examining binary executables?

   • AGDB
   • BMetasploit
   • CWireshark
   • DGhidra
   Reveal Solution Discussion Select an answer first