nerdexam
(ISC)2

SSCP · Question #1135

__________ attacks capitalize on programming errors and can allow the originator to gain additional privileges on a machine.

The correct answer is B. Buffer Overflow. Buffer overflow attacks capitalize on programming errors where data exceeds an allocated memory buffer, potentially leading to arbitrary code execution and privilege escalation.

Submitted by hans_de· Apr 18, 2026Systems and Application Security

Question

__________ attacks capitalize on programming errors and can allow the originator to gain additional privileges on a machine.

Options

  • ASYN Flood
  • BBuffer Overflow
  • CDenial of Service
  • DCoordinated
  • EDistributed Denial of Service

How the community answered

(29 responses)
  • B
    97% (28)
  • C
    3% (1)

Why each option

Buffer overflow attacks capitalize on programming errors where data exceeds an allocated memory buffer, potentially leading to arbitrary code execution and privilege escalation.

ASYN Flood

A SYN flood is a type of Denial of Service (DoS) attack that overwhelms a target system by initiating numerous TCP connections without completing the handshake, not typically used for privilege escalation via programming errors.

BBuffer OverflowCorrect

A buffer overflow attack exploits a programming flaw where a program attempts to write data beyond the allocated buffer capacity, overwriting adjacent memory locations. This can lead to system crashes, arbitrary code execution, and potentially privilege escalation if the injected code grants the attacker higher permissions on the target machine.

CDenial of Service

Denial of Service (DoS) attacks aim to make a service unavailable to legitimate users by overwhelming it, not to gain additional privileges by exploiting programming errors.

DCoordinated

Coordinated attacks refer to multiple attackers or attack vectors used together but do not describe a specific type of attack that exploits programming errors for privilege escalation.

EDistributed Denial of Service

Distributed Denial of Service (DDoS) is an enhanced DoS attack using multiple sources to flood a target, and like DoS, its goal is unavailability, not privilege escalation through programming flaws.

Concept tested: Buffer overflow attack mechanism

Source: https://learn.microsoft.com/en-us/security/engineering/bug-bar/buffer-overflow

Topics

#Buffer Overflow#Programming Errors#Vulnerability Exploitation#Privilege Escalation

Community Discussion

No community discussion yet for this question.

Full SSCP Practice