While performing a dynamic analysis of a malicious file, a security analyst notices the memory address changes every time the process runs. Which of the following controls is most likely preventing…

The correct answer is A. Address space layout randomization. Address space layout randomization (ASLR) is a security control that randomizes the memory address space of a process, making it harder for an attacker to exploit memory-based vulnerabilities, such as buffer overflows. ASLR can also prevent a security analyst from finding the…

Submitted by packet_pusher· Mar 6, 2026Security operations

Question

While performing a dynamic analysis of a malicious file, a security analyst notices the memory address changes every time the process runs. Which of the following controls is most likely preventing the analyst from finding the proper memory address of the piece of malicious code?

Options

AAddress space layout randomization
BData execution prevention
CStack canary
DCode obfuscation

How the community answered

(16 responses)

A
94% (15)
D
6% (1)

Explanation

Address space layout randomization (ASLR) is a security control that randomizes the memory address space of a process, making it harder for an attacker to exploit memory-based vulnerabilities, such as buffer overflows. ASLR can also prevent a security analyst from finding the proper memory address of a piece of malicious code, as the memory address changes every time the process runs.

Topics

#dynamic analysis#ASLR#exploit mitigation

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice