What is the primary purpose of a payload in an exploit?

To execute actions on the target system after exploitation

To deliver the exploit code to the target

To scan the target for vulnerabilities

To patch the vulnerability being exploited

A penetration tester has completed a vulnerability scan of a client's network and identified several critical vulnerabilities. The client's scope agreement allows active exploitation but prohibits any action that could cause a denial of service. The tester must prioritize which vulnerabilities to exploit to demonstrate impact. Which approach best balances the need to prove risk with the constraint against DoS?

Exploit all critical vulnerabilities to provide a comprehensive risk assessment.

Use automated tools to exploit every vulnerability quickly, minimizing the chance of DoS.

Skip exploitation entirely and rely on the scan results to report risk.

Select vulnerabilities that are known to be reliably exploitable without causing service disruption.

A penetration tester has been hired to test a client's external infrastructure. The rules of engagement explicitly prohibit testing any third-party systems. During the engagement, the tester discovers that a client's web application is hosted on a shared server that also hosts other companies' applications. What should the tester do?

Stop testing immediately and inform the client that the target is out of scope.

Ask the client for permission to test the other tenants' applications.

Test all applications on the shared server to ensure thorough coverage.

Continue testing the web application but avoid accessing any data belonging to other tenants.

A penetration tester has completed a vulnerability scan of a client's external web application and identified a SQL injection flaw in the login form. The client's scope document explicitly authorizes exploitation of web application vulnerabilities but prohibits any actions that could cause data loss or service disruption. Which action best aligns with the engagement's objectives and constraints?

Use a time-based blind injection to enumerate all database tables and rows.

Use a UNION-based injection to extract a single non-sensitive record to prove the flaw, then document the finding.

Run sqlmap with the --drop-table option to confirm the injection and clean up afterward.

Report the vulnerability based solely on the scanner output without attempting exploitation.

GIAC Penetration Tester (GPEN)

Domain 2Objective 1

Exploitation Fundamentals GPEN Practice Questions (Page 8)

Part of the Exploitation and Post-Exploitation domain, which makes up ~22% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–26 in this domain), expect 4–7 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

7concepts

Questions 36–40

36foundation · easy
What is the primary purpose of a payload in an exploit?
Select an answer first
37expert · hard
A penetration tester has completed a vulnerability scan of a client's network and identified several critical vulnerabilities. The client's scope agreement allows active exploitation but prohibits any action that could cause a denial of service. The tester must prioritize which vulnerabilities to exploit to demonstrate impact. Which approach best balances the need to prove risk with the constraint against DoS?
Select an answer first
38application · medium
A penetration tester has been hired to test a client's external infrastructure. The rules of engagement explicitly prohibit testing any third-party systems. During the engagement, the tester discovers that a client's web application is hosted on a shared server that also hosts other companies' applications. What should the tester do?
Select an answer first
39application · medium
A penetration tester has completed a vulnerability scan of a client's external web application and identified a SQL injection flaw in the login form. The client's scope document explicitly authorizes exploitation of web application vulnerabilities but prohibits any actions that could cause data loss or service disruption. Which action best aligns with the engagement's objectives and constraints?
Select an answer first
40foundation · easy
Which exploitation technique involves sending more data to a buffer than it can hold, potentially overwriting adjacent memory?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GPEN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GPEN” is a trademark of its owner, used for identification only.

Exploitation Fundamentals GPEN Practice Questions (Page 8)

Questions 36–40

What is the primary purpose of a payload in an exploit?

Which exploitation technique involves sending more data to a buffer than it can hold, potentially overwriting adjacent memory?

Keep studying — Exploitation and Post-Exploitation