GIAC (SANS)

GIAC Exploit Researcher and Advanced Penetration Tester

GXPN

The GIAC Exploit Researcher and Advanced Penetration Tester (GXPN) certification validates your ability to pinpoint and mitigate significant security flaws in systems and networks. It is designed for penetration testers and security professionals who conduct advanced attacks by modeling attacker behavior. Earning GXPN proves you can demonstrate and mitigate business risk with expert-level exploitation knowledge.

Practice Free Questions

5Domains

14Objectives

108Practice pages

510Free questions

GXPN free practice questions

Choose any objective and open any question page — no sign-in required.

Linux Execution, Memory, and Shellcode Foundations

35 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35

Windows Execution and Memory Foundations

42 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–42

Return Oriented Stack-Based Exploits

29 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–29

Windows Overflows and Execution Control

27 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–27

Bypassing Linux Exploit Mitigations

22 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–22

Bypassing Windows Memory Protections

23 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–23

Establishing Network Access

6 questions · 2 pages

Questions 1–5 6–6

Infrastructure Manipulation and Exploitation

26 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–26

Traffic Interception and Manipulation

38 questions · 8 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–38

Practical Cryptography

48 questions · 10 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–48

Practical Scripting for Offensive Operations

45 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45

Endpoint Control Evasions and Escalation

73 questions · 15 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–55 56–60 61–65 66–70 71–73

Product Security Testing and Fuzzing Foundations

45 questions · 9 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45

Source Code Based Fuzzing Techniques

51 questions · 11 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–35 36–40 41–45 46–50 51–51

Want a smarter study session?Try adaptive questions aimed at your weak spots, the illustrated book, and readiness you can trust.

Continue Free Practice

Percentages reflect share of the current practice bank, not official exam weightings. Every page above is a live, crawlable practice page (14 objectives · 108 pages).

GIAC Exploit Researcher and Advanced Penetration Tester

GXPN free practice questions

Domain 1 · Exploitation Foundations and Memory Corruption26% of practice bank · 4 objectives · 133 questions26%

Domain 2 · Exploit Mitigation Bypass Techniques9% of practice bank · 2 objectives · 45 questions9%

Domain 3 · Network and Infrastructure Attacks14% of practice bank · 3 objectives · 70 questions14%

Domain 4 · Offensive Scripting and Cryptography18% of practice bank · 2 objectives · 93 questions18%

Domain 5 · Endpoint Evasion, Privilege Escalation, and Product Security Testing33% of practice bank · 3 objectives · 169 questions33%