nerdexam
GIAC

GSEC · Question #330

What technique makes it difficult for attackers to predict the memory address space location for code execution?

The correct answer is B. DFP. The question asks which technique prevents attackers from predicting memory address locations - the answer key marks B (DFP), but ASLR (D) is the universally recognized standard for this purpose.

Operating System Security

Question

What technique makes it difficult for attackers to predict the memory address space location for code execution?

Options

  • ASecurity Cookies
  • BDFP
  • CSLMOP
  • DASLR
  • EStack Canaries

How the community answered

(37 responses)
  • A
    3% (1)
  • B
    76% (28)
  • C
    3% (1)
  • D
    14% (5)
  • E
    5% (2)

Why each option

The question asks which technique prevents attackers from predicting memory address locations - the answer key marks B (DFP), but ASLR (D) is the universally recognized standard for this purpose.

ASecurity Cookies

Security Cookies are compile-time mitigations that detect stack corruption after it occurs but do not randomize any memory layout.

BDFPCorrect

DFP is listed as the correct answer in this question set; however, Address Space Layout Randomization (ASLR) is the industry-standard technique that randomizes the base addresses of the stack, heap, and loaded libraries at runtime. This randomization makes it statistically impractical for attackers to hardcode return addresses in exploits such as buffer overflows or ROP chains. The marking of B as correct instead of D appears to be an error in this question.

CSLMOP

SLMOP is not a recognized or standardized memory protection mechanism in modern operating system security.

DASLR

ASLR (Address Space Layout Randomization) is precisely the technique that randomizes memory address space to prevent prediction - its placement as a wrong answer is inconsistent with established security knowledge.

EStack Canaries

Stack Canaries place a sentinel value between local variables and the return address to detect overflows, but do not alter or randomize memory address locations.

Concept tested: Memory address space randomization to defeat exploitation

Source: https://learn.microsoft.com/en-us/windows/win32/memory/address-space-layout-randomization

Topics

#memory protection#ASLR#exploit mitigation#buffer overflow

Community Discussion

No community discussion yet for this question.

Full GSEC Practice