GAQM Exam CPEH-001 Topic 2 Question 102 Discussion

Actual exam question for GAQM's CPEH-001 exam

Question #: 102
Topic #: 2

StackGuard (as used by Immunix), ssp/ProPolice (as used by OpenBSD), and Microsoft's /GS option use _____ defense against buffer overflow attacks.

ACanary

BHex editing

CFormat checking

DNon-executing stack

Show Suggested Answer

Suggested Answer: A

Canaries or canary words are known values that are placed between a buffer and control data on the stack to monitor buffer overflows. When the buffer overflows, it will clobber the canary, making the overflow evident. This is a reference to the historic practice of using canaries in coal mines, since they would be affected by toxic gases earlier than the miners, thus providing a biological warning system.

by Thurman at Oct 23, 2024, 01:46 PM

Limited Time Offer

25%

1 months ago

I think the answer is A) Canary.

upvoted 0 times

...