PCDRA · Question #50
Which Exploit Protection Module (EPM) can be used to prevent attacks based on OS function?
The correct answer is B. DLL Security. DLL Security is the Exploit Protection Module (EPM) designed to prevent attacks that abuse OS-level functions by controlling how Dynamic Link Libraries (DLLs) are loaded. It blocks techniques such as DLL hijacking and DLL side-loading, where attackers place malicious DLLs in…
Question
Which Exploit Protection Module (EPM) can be used to prevent attacks based on OS function?
Options
- AMemory Limit Heap Spray Check
- BDLL Security
- CUASLR
- DJIT Mitigation
How the community answered
(36 responses)- A3% (1)
- B89% (32)
- C3% (1)
- D6% (2)
Explanation
DLL Security is the Exploit Protection Module (EPM) designed to prevent attacks that abuse OS-level functions by controlling how Dynamic Link Libraries (DLLs) are loaded. It blocks techniques such as DLL hijacking and DLL side-loading, where attackers place malicious DLLs in locations where legitimate processes will load them. The other options-Memory Limit Heap Spray Check, UASLR, and JIT Mitigation-target different attack vectors (heap spray attacks, address randomization, and just-in-time compiler exploitation, respectively).
Topics
Community Discussion
No community discussion yet for this question.