What is a SUID binary in Linux and how can it be exploited for privilege escalation?

A binary that is set to run at system startup

A binary that is hidden from the file system

A binary that runs with the file owner's privileges, which can be exploited if it is writable or has known vulnerabilities

A binary that is owned by the current user

A product security team is developing a new IoT device that collects sensitive health data. The team must balance user privacy with the need to transmit data to the cloud for analysis. Which threat modeling approach would best identify and prioritize risks related to data privacy?

Use STRIDE to identify spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege threats.

Focus only on encryption of data in transit.

Use a simple checklist of common IoT vulnerabilities.

Perform a penetration test after the product is developed.

A software company is integrating security testing into its SDLC. They want to identify design-level threats early in the development process, before code is written. Which activity should they prioritize?

Perform threat modeling during the design phase to identify potential threats and mitigations.

Run fuzzing tests on the compiled binary to discover vulnerabilities.

Conduct a secure code review of the source code after the first build.

Deploy a web application firewall to protect the product in production.

What is the purpose of developing a proof-of-concept (PoC) exploit in product security testing?

To test the performance of the product under attack

To create a working exploit for malicious use

To provide a patch for the vulnerability

To demonstrate that a vulnerability is real and exploitable

A vendor releases a security patch for a critical vulnerability in their software. As a product security tester, you need to understand the vulnerability to assess your own exposure. Which approach is most appropriate?

Download the patch and perform binary diffing against the previous version to identify the changed code and infer the vulnerability.

Contact the vendor and ask for the vulnerability details.

Use a fuzzer to test the patched version for the same vulnerability.

Search for public exploit code and run it against your systems to confirm the vulnerability.

GIAC Exploit Researcher and Advanced Penetration Tester

Domain 5Objective 1

Endpoint Control Evasions and Escalation GXPN Practice Questions (Page 10)

Part of the Endpoint Evasion, Privilege Escalation, and Product Security Testing domain, which makes up ~33% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~23–40 in this domain), expect 8–13 from this objective — we provide 73 practice questions to prepare you well beyond it. (estimate)

73questions here

15free pages

20concepts

20 Concepts in This Objective

Endpoint Control Evasion Fundamentals
Antivirus Evasion Techniques
Host-Based Intrusion Detection System (HIDS) Evasion
Application Whitelisting Bypass
Endpoint Detection and Response (EDR) Evasion
Privilege Escalation Fundamentals
Windows Privilege Escalation Techniques
Linux Privilege Escalation Techniques
Token Manipulation and Impersonation
Service and Scheduled Task Exploitation
Credential Harvesting and Reuse
UAC Bypass Techniques
Kernel Exploitation Basics
Product Security Testing Concepts
Threat Modeling for Products
Secure Code Review
Fuzzing and Vulnerability Discovery
Exploit Development for Product Testing
Patch Analysis and Reverse Engineering
Reporting and Remediation Guidance

Questions 46–50

46foundation · easy
What is a SUID binary in Linux and how can it be exploited for privilege escalation?
Select an answer first
47expert · hard
A product security team is developing a new IoT device that collects sensitive health data. The team must balance user privacy with the need to transmit data to the cloud for analysis. Which threat modeling approach would best identify and prioritize risks related to data privacy?
Select an answer first
48application · medium
A software company is integrating security testing into its SDLC. They want to identify design-level threats early in the development process, before code is written. Which activity should they prioritize?
Select an answer first
49foundation · easy
What is the purpose of developing a proof-of-concept (PoC) exploit in product security testing?
Select an answer first
50application · medium
A vendor releases a security patch for a critical vulnerability in their software. As a product security tester, you need to understand the vulnerability to assess your own exposure. Which approach is most appropriate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GXPN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GXPN” is a trademark of its owner, used for identification only.