nerdexam
CompTIA

CAS-001 · Question #396

A system administrator is troubleshooting a possible denial of service on a sensitive system. The system seems to run properly for a few hours after it is restarted, but then it suddenly stops…

The correct answer is A. The system does not implement proper garbage collection. The process output shows memory consumption growing exponentially over time with the same PID (2055), while the system ultimately stops processing transactions: 920K → 5.2M → 22M → 1.6G → 8.0G. This is a classic memory leak pattern - the process continuously allocates memory…

Enterprise Security

Question

A system administrator is troubleshooting a possible denial of service on a sensitive system. The system seems to run properly for a few hours after it is restarted, but then it suddenly stops processing transactions. The system administrator suspects an internal DoS caused by a disgruntled developer who is currently seeking a new job while still working for the company. After looking into various system logs, the system administrator looks at the following output from the main system service responsible for processing incoming transactions. DATE/TIMEPIDCOMMAND%CPUMEM 031020141030002055com.proc10.2920K 031020141100002055com.proc12.35.2M 031020141230002055com.proc22.022M 031020141300002055com.proc33.01.6G 031020141330002055com.proc30.28.0G Which of the following is the MOST likely cause for the DoS?

Options

  • AThe system does not implement proper garbage collection.
  • BThe system is susceptible to integer overflow.
  • CThe system does not implement input validation.
  • DThe system does not protect against buffer overflows properly.

How the community answered

(48 responses)
  • A
    56% (27)
  • B
    15% (7)
  • C
    23% (11)
  • D
    6% (3)

Explanation

The process output shows memory consumption growing exponentially over time with the same PID (2055), while the system ultimately stops processing transactions: 920K → 5.2M → 22M → 1.6G → 8.0G. This is a classic memory leak pattern - the process continuously allocates memory but never releases it. In managed runtime environments (Java, .NET, etc.), this occurs when objects are not properly released and garbage collection (GC) fails to reclaim allocated heap space, eventually exhausting available memory and causing the system to halt. A developer with malicious intent could have deliberately introduced code that prevents GC from reclaiming memory (e.g., by maintaining hidden references to objects). Integer overflow (B) would produce incorrect calculation results or unexpected behavior, not gradual memory exhaustion. Input validation failure (C) would lead to injection or logic errors. Buffer overflow (D) typically causes immediate crashes or enables code execution exploits, not a slow, progressive memory growth pattern over hours.

Topics

#garbage collection#memory leak#insider threat#denial of service

Community Discussion

No community discussion yet for this question.

Full CAS-001 Practice