Buffer Overflows - CompTIA Security+ SY0-701 - 2.3

Which of the following best describes the attacker’s goal in a buffer overflow?

• Input validation

• Repeatable and advantageous overflow

• Triggering memory leaks

• Writing firewall rules

What is the purpose of an attacker probing an application?

• To find buffer overflow vulnerabilities

• To improve application performance

• To enhance user experience

• To increase application security

What is the decimal value of 0x65?

• 99

• 100

• 101

• 102

What is a buffer overflow?

• Writing more data into a buffer than it can hold

• A method to increase buffer size

• A technique for data encryption

• A type of memory leak

What is likely the result of a failed buffer overflow attempt?

• System or application crash

• Increased system performance

• Enhanced security features

• Data encryption

Bounds _______ is a technique developers use to prevent buffer overflows.

• checking

• validation

• monitoring

• tracking

Variable B grants administrator access if its value is greater than or equal to _______.

• 20000

• 22000

• 24000

• 26000

How does the attacker change Variable B’s value to 25,856?

• By deleting data

• By entering a password

• By exploiting a GUI bug

• By writing "excessive" into Variable A

What value of Variable B grants administrator access?

• < 2000

• 1979

• ≥ 24000

• 23999

A buffer overflow occurs when more data is written into a buffer than it can _______.

• hold

• process

• transfer

• store