Buffer Overflow and ROP Quiz

What is a buffer overflow?

• A condition where data is overwritten in a buffer within its allocated space.

• A situation where more data is written to a buffer than it can hold.

• A technique to optimize memory allocation.

• A type of network protocol failure.

Which type of memory is commonly associated with stack buffer overflows?

• Heap

• Stack

• Registers

• Cache

What happens when a return address on the stack is overwritten during a buffer overflow?

• The program crashes immediately.

• Arbitrary code execution may occur.

• The buffer is resized dynamically.

• The CPU halts execution permanently.

Which programming practice can help prevent buffer overflows?

• Avoiding the use of pointers.

• Input validation and sanitization.

• Writing code in machine language.

• Using statically allocated memory only.

What is the role of a "canary" in buffer overflow protection?

• Encrypts data within a buffer.

• Randomizes the stack memory layout.

• Detects unauthorized memory overwrites.

• Ensures all buffers are the same size.

Which function is most vulnerable to buffer overflows?

• scanf()

• printf()

• strcpy()

• malloc()

How does Address Space Layout Randomization (ASLR) mitigate buffer overflow attacks?

• By making stack memory non-executable.

• By randomizing the location of critical memory regions.

• By encrypting return addresses.

• By increasing buffer sizes.

Which type of overflow exploits dynamically allocated memory?

• Stack overflow

• Heap overflow

• Buffer underflow

• Register spill

Why is disabling stack execution (DEP) insufficient to stop all buffer overflow attacks?

• Attackers can disable DEP at runtime.

• DEP only protects against read accesses.

• Techniques like Return-Oriented Programming (ROP) bypass DEP.

• DEP is only effective on Linux systems.

Which of the following is not a common buffer overflow prevention mechanism?

• ASLR

• DEP

• Shadow paging

• Stack canaries