Mitigation Controls CS0-003 Practice Questions (Page 7)

Questions 31–31

1. 31expert · hard

   A development team is migrating a legacy C application to a modern operating system. The application has a history of buffer overflow vulnerabilities. The team wants to implement multiple layers of defense. Which combination of controls provides the most comprehensive mitigation?

   • AUse a web application firewall to filter incoming data and disable ASLR to improve performance.
   • BEnable ASLR and DEP only, and rely on the operating system to handle any remaining vulnerabilities.
   • CCompile with stack canaries, enable ASLR, enable DEP, and replace unsafe functions with bounds-checking alternatives.
   • DIncrease the buffer size to 1GB and use the gets() function for simplicity.
   Reveal Solution Discussion Select an answer first