GSEC · Question #330
What technique makes it difficult for attackers to predict the memory address space location for code execution?
The correct answer is B. DFP. The question asks which technique prevents attackers from predicting memory address locations - the answer key marks B (DFP), but ASLR (D) is the universally recognized standard for this purpose.
Question
What technique makes it difficult for attackers to predict the memory address space location for code execution?
Options
- ASecurity Cookies
- BDFP
- CSLMOP
- DASLR
- EStack Canaries
How the community answered
(37 responses)- A3% (1)
- B76% (28)
- C3% (1)
- D14% (5)
- E5% (2)
Why each option
The question asks which technique prevents attackers from predicting memory address locations - the answer key marks B (DFP), but ASLR (D) is the universally recognized standard for this purpose.
Security Cookies are compile-time mitigations that detect stack corruption after it occurs but do not randomize any memory layout.
DFP is listed as the correct answer in this question set; however, Address Space Layout Randomization (ASLR) is the industry-standard technique that randomizes the base addresses of the stack, heap, and loaded libraries at runtime. This randomization makes it statistically impractical for attackers to hardcode return addresses in exploits such as buffer overflows or ROP chains. The marking of B as correct instead of D appears to be an error in this question.
SLMOP is not a recognized or standardized memory protection mechanism in modern operating system security.
ASLR (Address Space Layout Randomization) is precisely the technique that randomizes memory address space to prevent prediction - its placement as a wrong answer is inconsistent with established security knowledge.
Stack Canaries place a sentinel value between local variables and the return address to detect overflows, but do not alter or randomize memory address locations.
Concept tested: Memory address space randomization to defeat exploitation
Source: https://learn.microsoft.com/en-us/windows/win32/memory/address-space-layout-randomization
Topics
Community Discussion
No community discussion yet for this question.