What is the primary benefit of integrating fuzzing into a continuous integration (CI) pipeline?

To automatically run fuzzing on every code change, catching regressions early.

To guarantee that no vulnerabilities exist in the final product.

To eliminate the need for a dedicated security team.

To replace all manual security testing and code reviews.

A security engineer is running an AFL-based fuzzing campaign against a command-line tool that reads a configuration file. The campaign has been running for 24 hours and produced 15 unique crashes. The engineer wants to determine which crashes are worth investigating first. Which action is most appropriate?

Re-run each crashing input under a debugger to identify the faulting instruction and backtrace

Increase the number of parallel fuzzing instances to get more crashes

Immediately report all 15 crashes as separate vulnerabilities to the development team

Delete crashes that do not reproduce on the first attempt

A penetration tester is evaluating a web application that accepts file uploads and processes them with a custom image resizing library. The tester wants to find memory corruption bugs in the library. Which fuzzing tool and approach is most suitable?

Use a grammar-based fuzzer to generate valid image files based on the PNG specification.

Use a web application scanner to send random file uploads and observe crashes.

Use a file-format fuzzer like AFL with a custom harness that calls the image library directly on input files.

Use a network-based fuzzer like Peach to send malformed HTTP requests to the web application.

A security team is fuzzing a complex file format that has a checksum and a length field. They have a seed corpus of valid files. They want to maximize the number of test cases that pass the checksum validation to reach deeper parsing logic. Which approach is most effective?

Use a simple bit-flipping mutation on the seed files without updating the checksum

Use a structure-aware mutation engine that automatically updates the length and checksum fields after each mutation

Use a coverage-guided fuzzer without any seed corpus

Use a generation-based fuzzer that creates files with random checksums

A security engineer is running a fuzzing campaign on a network service and notices that the service occasionally hangs but does not crash. The engineer wants to detect these hangs and capture the input that caused them. What is the most effective way to monitor for hangs?

Set a timeout for each test case and treat any input that exceeds the timeout as a hang

Use a network sniffer to capture all traffic and manually review for anomalies

Increase the fuzzing speed to reduce the chance of hangs

Monitor CPU usage and only flag inputs that cause 100% CPU for more than a minute

GIAC Exploit Researcher and Advanced Penetration Tester

Domain 5Objective 2

Product Security Testing and Fuzzing Foundations GXPN Practice Questions (Page 8)

Part of the Endpoint Evasion, Privilege Escalation, and Product Security Testing domain, which makes up ~33% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~23–40 in this domain), expect 8–13 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

8concepts

Questions 36–40

36foundation · easy
What is the primary benefit of integrating fuzzing into a continuous integration (CI) pipeline?
Select an answer first
37application · medium
A security engineer is running an AFL-based fuzzing campaign against a command-line tool that reads a configuration file. The campaign has been running for 24 hours and produced 15 unique crashes. The engineer wants to determine which crashes are worth investigating first. Which action is most appropriate?
Select an answer first
38application · medium
A penetration tester is evaluating a web application that accepts file uploads and processes them with a custom image resizing library. The tester wants to find memory corruption bugs in the library. Which fuzzing tool and approach is most suitable?
Select an answer first
39expert · hard
A security team is fuzzing a complex file format that has a checksum and a length field. They have a seed corpus of valid files. They want to maximize the number of test cases that pass the checksum validation to reach deeper parsing logic. Which approach is most effective?
Select an answer first
40application · medium
A security engineer is running a fuzzing campaign on a network service and notices that the service occasionally hangs but does not crash. The engineer wants to detect these hangs and capture the input that caused them. What is the most effective way to monitor for hangs?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GXPN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GXPN” is a trademark of its owner, used for identification only.