When DEP is enabled, which technique allows an attacker to execute code by chaining together existing instructions from loaded modules to perform a desired sequence of operations?

Return-oriented programming (ROP)

When both DEP and ASLR are enabled, which combination of techniques is commonly used to achieve code execution?

Partial overwrite to bypass DEP, then return-to-libc to bypass ASLR

Information leak to bypass ASLR, then ROP to bypass DEP

Heap spraying to bypass DEP, then stack smashing to bypass ASLR

SEH overwrite to bypass ASLR, then format string to bypass DEP

GIAC Exploit Researcher and Advanced Penetration Tester

Domain 2Objective 2

Bypassing Windows Memory Protections GXPN Practice Questions (Page 3)

Part of the Exploit Mitigation Bypass Techniques domain, which makes up ~9% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~6–11 in this domain), expect 3–6 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

8concepts

Questions 11–15

11foundation · easy
Which Windows mitigation validates indirect call targets to ensure they are valid function entry points, preventing many control-flow hijacking attacks?
Select an answer first
12foundation · easy
When DEP is enabled, which technique allows an attacker to execute code by chaining together existing instructions from loaded modules to perform a desired sequence of operations?
Select an answer first
13foundation · easy
Which Windows heap protection adds random values to heap metadata to make it harder to predict or corrupt heap structures?
Select an answer first
14foundation · easy
When both DEP and ASLR are enabled, which combination of techniques is commonly used to achieve code execution?
Select an answer first
15foundation · easy
Which technique is used to arrange heap allocations in a predictable pattern to facilitate exploitation of heap-based vulnerabilities?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GXPN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GXPN” is a trademark of its owner, used for identification only.

Bypassing Windows Memory Protections GXPN Practice Questions (Page 3)

Questions 11–15

Which Windows mitigation validates indirect call targets to ensure they are valid function entry points, preventing many control-flow hijacking attacks?

When DEP is enabled, which technique allows an attacker to execute code by chaining together existing instructions from loaded modules to perform a desired sequence of operations?

Which Windows heap protection adds random values to heap metadata to make it harder to predict or corrupt heap structures?

When both DEP and ASLR are enabled, which combination of techniques is commonly used to achieve code execution?

Which technique is used to arrange heap allocations in a predictable pattern to facilitate exploitation of heap-based vulnerabilities?

Keep studying — Exploit Mitigation Bypass Techniques