Which Windows mitigation control uses hardware support to validate indirect branch targets?

Address Space Layout Randomization (ASLR)

Control-flow Enforcement Technology (CET)

What is the primary purpose of SafeSEH on Windows?

To randomize the location of the stack

To prevent stack buffer overflows from occurring

To validate that exception handlers are registered in a known table

In a SEH overwrite exploit, what is the typical target data structure that is overwritten to gain execution control?

The Thread Environment Block (TEB) pointer

The Process Environment Block (PEB)

The Structured Exception Handler (SEH) record on the stack

Which of the following is a common target for overwriting to redirect execution flow in a Windows application?

A virtual function table (vtable) pointer

The Thread Information Block (TIB)

Why is ROP commonly used to bypass DEP on Windows?

Because it reuses existing executable code, avoiding the need to execute shellcode on non-executable pages

Because it disables DEP by modifying the NX bit

Because it allocates executable memory for shellcode

Because it patches the kernel to ignore DEP

GIAC Exploit Researcher and Advanced Penetration Tester

Domain 1Objective 4

Windows Overflows and Execution Control GXPN Practice Questions (Page 1)

Part of the Exploitation Foundations and Memory Corruption domain, which makes up ~26% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~18–31 in this domain), expect 5–8 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

9concepts

Questions 1–5

1foundation · easy
Which Windows mitigation control uses hardware support to validate indirect branch targets?
Select an answer first
2foundation · easy
What is the primary purpose of SafeSEH on Windows?
Select an answer first
3foundation · easy
In a SEH overwrite exploit, what is the typical target data structure that is overwritten to gain execution control?
Select an answer first
4foundation · easy
Which of the following is a common target for overwriting to redirect execution flow in a Windows application?
Select an answer first
5foundation · easy
Why is ROP commonly used to bypass DEP on Windows?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GXPN

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GXPN” is a trademark of its owner, used for identification only.