nerdexam
(ISC)2

CISSP · Question #571

Which of the following techniques BEST prevents buffer overflows?

The correct answer is C. Code auditing. Buffer overflow prevention is best achieved through code auditing, which identifies unsafe memory handling practices before they can be exploited. The other options are either fabricated terms or unrelated security concepts.

Submitted by cyberguy42· Mar 5, 2026Software Development Security

Question

Which of the following techniques BEST prevents buffer overflows?

Options

  • ABoundary and perimeter offset
  • BCharacter set encoding
  • CCode auditing
  • DVariant type and bit length

How the community answered

(32 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    88% (28)
  • D
    6% (2)

Why each option

Buffer overflow prevention is best achieved through code auditing, which identifies unsafe memory handling practices before they can be exploited. The other options are either fabricated terms or unrelated security concepts.

ABoundary and perimeter offset

Boundary and perimeter offset is not a recognized security technique for preventing buffer overflows; it appears to be a fabricated or nonsensical term combining unrelated security concepts.

BCharacter set encoding

Character set encoding relates to how characters are represented in text (e.g., UTF-8, ASCII) and does not directly prevent buffer overflows, which are caused by writing beyond allocated memory boundaries rather than encoding issues.

CCode auditingCorrect

Code auditing involves systematically reviewing source code to identify unsafe functions (e.g., strcpy, gets) and improper input validation that lead to buffer overflows. By catching these vulnerabilities during development or review, developers can replace dangerous functions with bounds-checked alternatives and enforce proper memory management. This proactive approach directly addresses the root cause of buffer overflows before deployment.

DVariant type and bit length

Variant type and bit length is not a standard security technique; while data type sizing can influence memory allocation, this phrasing does not describe a recognized method for preventing buffer overflow vulnerabilities.

Concept tested: Buffer overflow prevention through code auditing

Source: https://owasp.org/www-community/vulnerabilities/Buffer_Overflow

Topics

#Buffer overflow prevention#Code auditing#Software vulnerabilities#Secure coding practices

Community Discussion

No community discussion yet for this question.

Full CISSP Practice