You are crafting a buffer overflow payload that must be URL-encoded before being sent to a web application. The payload contains binary data, including null bytes. Which Python approach correctly encodes the payload?

Use `payload.hex()` and send the hex string as the URL parameter.

Use `payload.encode('utf-8')` and then `urllib.parse.quote()` on the resulting string.

Use `urllib.parse.quote_from_bytes(payload)` to percent-encode the raw bytes.

Use `base64.b64encode(payload)` and send the base64 string as the URL parameter.

You are automating a vulnerability scan using Nessus. You need to run the scan and then parse the results to extract the list of high-severity findings. Which approach is most efficient?

Use the Nessus REST API to launch the scan and retrieve the results in JSON format.

Use the Nessus web interface to run the scan and manually export the results.

Use the nessuscli command-line tool to run the scan and parse the text output.

Use a Python script to run the scan via the command line and parse the HTML report.

When integrating Nmap into a Python script, which method is used to execute Nmap and capture its XML output?

subprocess.run(['nmap', '-oX', '-', target], capture_output=True)

GIAC Exploit Researcher and Advanced Penetration Tester

Domain 4Objective 2

Practical Scripting for Offensive Operations GXPN Practice Questions (Page 3)

Part of the Offensive Scripting and Cryptography domain, which makes up ~18% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~13–22 in this domain), expect 7–11 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

8concepts

Questions 11–15

11application · medium
You are crafting a buffer overflow payload that must be URL-encoded before being sent to a web application. The payload contains binary data, including null bytes. Which Python approach correctly encodes the payload?
Select an answer first
12foundation · easy
In Python, which method of a socket object is used to send data over a connected TCP socket?
Select an answer first
13application · medium
You are automating a vulnerability scan using Nessus. You need to run the scan and then parse the results to extract the list of high-severity findings. Which approach is most efficient?
Select an answer first
14foundation · easy
When integrating Nmap into a Python script, which method is used to execute Nmap and capture its XML output?
Select an answer first
15foundation · easy
In PowerShell, which cmdlet is used to execute a script block or command on a remote system using WinRM?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GXPN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GXPN” is a trademark of its owner, used for identification only.

Practical Scripting for Offensive Operations GXPN Practice Questions (Page 3)

Questions 11–15

You are crafting a buffer overflow payload that must be URL-encoded before being sent to a web application. The payload contains binary data, including null bytes. Which Python approach correctly encodes the payload?

In Python, which method of a socket object is used to send data over a connected TCP socket?

You are automating a vulnerability scan using Nessus. You need to run the scan and then parse the results to extract the list of high-severity findings. Which approach is most efficient?

When integrating Nmap into a Python script, which method is used to execute Nmap and capture its XML output?

In PowerShell, which cmdlet is used to execute a script block or command on a remote system using WinRM?

Keep studying — Offensive Scripting and Cryptography