A security team is building an automated pipeline that uses a network scanner to find open ports, a vulnerability scanner to identify CVEs, and an exploitation framework to attempt exploits. The team wants to ensure that only vulnerabilities that are present on open ports are exploited. Which integration step is necessary?

Use the vulnerability scanner's built-in exploit module to automatically exploit all findings.

Correlate the port scan results with the vulnerability scanner results to filter vulnerabilities that are not associated with open ports.

Run the exploitation framework against all vulnerabilities found by the scanner, regardless of port status.

Manually review the vulnerability report and decide which exploits to run.

A red team is automating reconnaissance for a large scope. The team must scan thousands of IP addresses but wants to avoid overwhelming the target network and triggering IDS alerts. They also need to complete the scan within a limited time window. Which approach best balances speed, stealth, and reliability?

Use a commercial scanner that is known to be stealthy and can scan the entire scope in one pass.

Use a distributed scanning approach with multiple low-rate scanners running in parallel, each configured with random delays and a maximum packet rate, coordinated by an orchestration script.

Manually scan a small sample of IP addresses and extrapolate the results to the entire scope.

Run a single fast Nmap scan with aggressive timing to complete quickly, accepting the risk of detection.

GIAC AI Security Automation Engineer

Domain 4Objective 1

Automating Offensive Workflows GASAE Practice Questions (Page 8)

Part of the Offensive and Defensive Automation domain, which makes up ~22% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–26 in this domain), expect 8–13 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

8concepts

Questions 36–40

36foundation · easy
Which technique is commonly used in automated reconnaissance to discover open ports and services on a target network?
Select an answer first
37foundation · easy
Which scripting language is widely used in offensive security automation due to its extensive libraries for network interaction and exploitation?
Select an answer first
38application · medium
A security team is building an automated pipeline that uses a network scanner to find open ports, a vulnerability scanner to identify CVEs, and an exploitation framework to attempt exploits. The team wants to ensure that only vulnerabilities that are present on open ports are exploited. Which integration step is necessary?
Select an answer first
39expert · hard
A red team is automating reconnaissance for a large scope. The team must scan thousands of IP addresses but wants to avoid overwhelming the target network and triggering IDS alerts. They also need to complete the scan within a limited time window. Which approach best balances speed, stealth, and reliability?
Select an answer first
40foundation · easy
In an automated offensive workflow, which phase typically follows reconnaissance?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GASAE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GASAE” is a trademark of its owner, used for identification only.

Automating Offensive Workflows GASAE Practice Questions (Page 8)

Questions 36–40

Which technique is commonly used in automated reconnaissance to discover open ports and services on a target network?

Which scripting language is widely used in offensive security automation due to its extensive libraries for network interaction and exploitation?

In an automated offensive workflow, which phase typically follows reconnaissance?

Keep studying — Offensive and Defensive Automation