Reverse Engineering, Fuzzing, and Binary Exploitation CPENT Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   What is the first step in analyzing a firmware image extracted from an IoT device?

   • AImmediately execute the firmware on the physical device
   • BIdentify the file system type and extract the file system to examine the files
   • CUpload the firmware to VirusTotal
   • DDisassemble the entire firmware image at once
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which of the following is a common metric used by coverage-guided fuzzers to decide which inputs to keep?

   • AWhether the input is longer than the previous one
   • BWhether the input is a valid file according to the format specification
   • CWhether the input increases code coverage (e.g., hits new basic blocks)
   • DWhether the input contains only printable ASCII characters
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A penetration tester is analyzing a Linux binary in GDB. The tester wants to see the disassembly of the main function and set a breakpoint at the function's entry point. Which GDB commands should be used?

   • A`x/20i $pc` and `continue`
   • B`info functions` and `run`
   • C`disassemble main` and `break main`
   • D`layout asm` and `next`
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   A security analyst has extracted a firmware image from an IoT device. The firmware is a raw binary that is expected to contain a Linux kernel and a filesystem. The analyst wants to emulate the firmware to perform dynamic analysis of a web service running on the device. The analyst has identified the architecture as MIPS. Which approach is most effective for emulating the entire firmware?

   • AUse QEMU in user-mode emulation to run the web service binary directly, providing the extracted filesystem as the root.
   • BUse QEMU in full-system emulation mode with a MIPS kernel and the extracted filesystem as a drive.
   • CUse binwalk to extract the filesystem and then use chroot to run the web service on the analyst's host machine.
   • DUse Ghidra's emulator to run the web service binary in a simulated environment.
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   What is the purpose of DEP (Data Execution Prevention) / NX (No-eXecute) bit?

   • ATo randomize the stack address
   • BTo detect buffer overflows by placing a canary before the return address
   • CTo encrypt the program's code
   • DTo mark memory pages as non-executable, preventing code execution from data regions like the stack or heap
   Reveal Solution Discussion Select an answer first