CSS Quiz 3 || Prutor ||
CSS Quiz – 3
2021
Note:- Take only idea of reason don’t copy paste
it otherwise you will face UFM.
Q1. Which of the following programming
languages have common buffer overflow problem
in the development of applications?
1. C, Ruby
2. C, C++
3. Python, Ruby
4. C, Python
Reason:- The problem of buffer overflows is
common in the C and C++ languages because
they expose low level representational details of
buffers as containers for data types.
Q2. Which type of buffer overflows are common
among attackers?
1. Memory-based
2. Queue-based
3. Stack-based
4. Heap-based
Reason:- Stack-based buffer overflows, which
are more common among attackers, exploit
applications and programs by using what is
known as a stack: memory space used to store
user input.
Q3. In ___________ attack, malicious code is
pushed into _______.
1. buffer-overflow, stack
2. buffer-overflow,queue
3. buffer-overflow, memory-card
4. buffer-overflow,external drive
Reason:- Malicious code can be pushed into the
stack during the buffer-overflow attack. The
overflow can be used to overwrite the return
pointer so that the control-flow switches to the
malicious code.
Q4. In case of integer overflow, Which of the
following option/s is/are true?
1. It is a result of an attempt to store a value greater than the maximum value an integer can store
2. Integer overflow can compromise a program's reliability and security
3. Both A and B
4. None of the above
Reason:- An integer overflow is a type of an
arithmetic overflow error when the result of an
integer operation does not fit within the
allocated memory space. Instead of an error in
the program, it usually causes the result to be
unexpected. Integer overflows have been listed
as the number 8 most dangerous software error
in the most recent CWE 2019 list
Q5. A string which contains ___________
parameter/s, is called ______ string.
1. Format, text
2. Text, format
3. text and format, format
4. None of the above
Reason:- The Format String is the argument of
the Format Function and is an ASCII Z string
which contains text and format parameters, like:
printf (“The magic number is: %d\n”, 1911);
No comments