CISSP · Question #571
Which of the following techniques BEST prevents buffer overflows?
The correct answer is C. Code auditing. Buffer overflow prevention is best achieved through code auditing, which identifies unsafe memory handling practices before they can be exploited. The other options are either fabricated terms or unrelated security concepts.
Question
Which of the following techniques BEST prevents buffer overflows?
Options
- ABoundary and perimeter offset
- BCharacter set encoding
- CCode auditing
- DVariant type and bit length
How the community answered
(32 responses)- A3% (1)
- B3% (1)
- C88% (28)
- D6% (2)
Why each option
Buffer overflow prevention is best achieved through code auditing, which identifies unsafe memory handling practices before they can be exploited. The other options are either fabricated terms or unrelated security concepts.
Boundary and perimeter offset is not a recognized security technique for preventing buffer overflows; it appears to be a fabricated or nonsensical term combining unrelated security concepts.
Character set encoding relates to how characters are represented in text (e.g., UTF-8, ASCII) and does not directly prevent buffer overflows, which are caused by writing beyond allocated memory boundaries rather than encoding issues.
Code auditing involves systematically reviewing source code to identify unsafe functions (e.g., strcpy, gets) and improper input validation that lead to buffer overflows. By catching these vulnerabilities during development or review, developers can replace dangerous functions with bounds-checked alternatives and enforce proper memory management. This proactive approach directly addresses the root cause of buffer overflows before deployment.
Variant type and bit length is not a standard security technique; while data type sizing can influence memory allocation, this phrasing does not describe a recognized method for preventing buffer overflow vulnerabilities.
Concept tested: Buffer overflow prevention through code auditing
Source: https://owasp.org/www-community/vulnerabilities/Buffer_Overflow
Topics
Community Discussion
No community discussion yet for this question.