MENU
StackGuard (as used by Immunix), ssp/ProPolice (as used by OpenBSD), and Microsoft's /GS option use _____ defense against buffer overflow attacks.
Suggested Answer: A
Get Premium CPEH-001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Canaries or canary words are known values that are placed between a buffer and control data on the stack to monitor buffer overflows. When the buffer overflows, it will clobber the canary, making the overflow evident. This is a reference to the historic practice of using canaries in coal mines, since they would be affected by toxic gases earlier than the miners, thus providing a biological warning system.
11 comments · newest first
AJ
Aja
12 months ago
Surprised to see so many options for buffer overflow!
SA
Sanda
12 months ago
I thought /GS was more about stack protection?
JO
Jose
12 months ago
Wait, isn't that just one part of the whole picture?
GE
Georgeanna
1 year ago
Totally agree, it's a solid method.
TA
Tatum
1 year ago
They all use canary defense!
MA
Mari
1 year ago
I thought it was B, Hex editing, but now that I think about it, that doesn't really fit with the context of buffer overflow defenses.
RE
Ressie
1 year ago
I recall that StackGuard and similar tools use some kind of protection mechanism, but I can't remember if it's specifically called a Canary.
AJ
Aja
1 year ago
I think the answer might be A, Canary. I remember studying how it works to detect buffer overflows by placing a value before the return address.
VI
Vicente
1 year ago
I'm not entirely sure, but I feel like I've seen questions about this before. Could it be D, Non-executing stack? That sounds familiar.
RU
Rupert
1 year ago
Okay, I'm pretty confident that Anomaly Detector is the right answer here. It's specifically built for anomaly detection in time series data, which is exactly what the question is asking for. And it can integrate with IoT Hub, so that seems like a perfect match.
MA
Malika
1 year ago
Okay, let's think this through step-by-step. The key details are the cloud pod architecture, the WAN links, and the need to minimize the number of open ports.