A security team is concerned with attacks that are taking advantage of return-oriented programming against the company's public-facing applications. Which of the following should the company…

The correct answer is B. ASLR. Return-Oriented Programming relies on attackers knowing or predicting the locations of “gadgets” in memory. Address Space Layout Randomization (ASLR) thwarts this by randomly arranging key data areas, like the stack, heap, and loaded libraries, each time a program runs…

Submitted by krish.m· Mar 6, 2026Security Engineering

Question

A security team is concerned with attacks that are taking advantage of return-oriented programming against the company’s public-facing applications. Which of the following should the company implement on the public-facing servers?

Options

AIDS
BASLR
CTPM
DHSM

How the community answered

(48 responses)

A
2% (1)
B
92% (44)
C
2% (1)
D
4% (2)

Explanation

Return-Oriented Programming relies on attackers knowing or predicting the locations of “gadgets” in memory. Address Space Layout Randomization (ASLR) thwarts this by randomly arranging key data areas, like the stack, heap, and loaded libraries, each time a program runs, preventing attackers from reliably chaining gadgets and executing ROP exploits.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice