When to use Span versus Marshal when calling native Win32 APIs?

I need to call a Win32 API which spits out a null terminated string into a buffer, and then read that string from the buffer.