nerdexam
Palo_Alto_Networks

XDR-ANALYST · Question #43

Which Exploit Protection Module (EPM) can be used to prevent attacks based on OS function?

The correct answer is B. JIT Mitigation. JIT Mitigation is an Exploit Protection Module (EPM) that can be used to prevent attacks based on OS function. JIT Mitigation protects against exploits that use the Just-In-Time (JIT) compiler of the OS to execute malicious code. JIT Mitigation monitors the memory pages that…

Cortex XDR Exploit Prevention

Question

Which Exploit Protection Module (EPM) can be used to prevent attacks based on OS function?

Options

  • AUASLR
  • BJIT Mitigation
  • CMemory Limit Heap Spray Check
  • DDLL Security

How the community answered

(48 responses)
  • A
    8% (4)
  • B
    73% (35)
  • C
    15% (7)
  • D
    4% (2)

Explanation

JIT Mitigation is an Exploit Protection Module (EPM) that can be used to prevent attacks based on OS function. JIT Mitigation protects against exploits that use the Just-In-Time (JIT) compiler of the OS to execute malicious code. JIT Mitigation monitors the memory pages that are allocated by the JIT compiler and blocks any attempts to execute code from those pages. This prevents attackers from using the JIT compiler as a way to bypass other security mechanisms such as Data Execution Prevention (DEP) and Address Space Layout Randomization (ASLR).

Topics

#Exploit Prevention Module#JIT mitigation#OS function protection#EPM

Community Discussion

No community discussion yet for this question.

Full XDR-ANALYST Practice