CISSP Exam QuestionsBrowse all questions from this exam

CISSP Exam - Question 388


Which mechanism provides the BEST protection against buffer overflow attacks in memory?

Show Answer
Correct Answer: A

Address Space Layout Randomization (ASLR) provides the best protection against buffer overflow attacks by randomizing the memory addresses used by system and application processes. This makes it more difficult for attackers to predict the location of specific vulnerabilities, thus reducing the risk of successful exploitation. Other options listed do not specifically target the mitigation of buffer overflow attacks as effectively as ASLR.

Discussion

9 comments
Sign in to comment
RollingalxOption: B
Feb 24, 2023

I go with B The memory management unit (MMU) provides hardware-based memory protection that can prevent buffer overflow attacks from succeeding by ensuring that each program has its own virtual address space and by detecting illegal memory accesses.

SpaceMonkey1Option: A
Apr 2, 2023

Address space layout randomization (ASLR) is a memory-protection process for operating systems (OSes) that guards against buffer-overflow attacks by randomizing the location where system executables are loaded into memory.

GoseuOption: A
Apr 4, 2023

Answer is A .

[Removed]Option: B
Apr 5, 2023

I would go for B. I cant remember Ive read A in the OSG. GPT agrees.

[Removed]Option: B
Apr 5, 2023

I would go for B. I cant remember Ive read A in the OSG. GPT agrees.

Delab202Option: A
Apr 8, 2023

Other techniques that can be used to protect against buffer overflow attacks include bounds checking, data execution prevention (DEP), address space layout randomization (ASLR), and code signing. It is recommended to use a combination of these techniques to provide comprehensive protection against buffer overflow attacks.

jackdryan
May 14, 2023

A is correct

SoleandheelOption: A
Dec 16, 2023

A. Address Space Layout Randomization (ASLR)

SoleandheelOption: A
Dec 16, 2023

A. Address Space Layout Randomization (ASLR) ASLR randomizes the memory addresses of program components, making it difficult for attackers to predict the location of vulnerable functions or data structures in memory. This helps mitigate buffer overflow attacks by adding an additional layer of security.

klarakOption: A
May 6, 2024

ASLR is one of the common mitigations for this attack. The others are not.