Valid CISSP Dumps shared by ExamDiscuss.com for Helping Passing CISSP Exam! ExamDiscuss.com now offer the newest CISSP exam dumps, the ExamDiscuss.com CISSP exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com CISSP dumps with Test Engine here:
In organization discovers that its secure file transfer protocol (SFTP) server has been accessed by an unauthorized person to download an unreleased game. A recent security audit found weaknesses in some of the organization's general information technology (IT) controls, specifically pertaining to software change control and security patch management, but not in other control areas. Which of the following is the MOST probable attack vector used in the security breach?
Correct Answer: A
The most probable attack vector used in the security breach is buffer overflow. Buffer overflow is a condition that occurs when a program attempts to write more data to a fixed-length memory space, or buffer, than it can hold. Buffer overflow can corrupt the adjacent memory locations, which may contain important data or instructions for the program. Buffer overflow can be exploited by attackers to inject malicious code into the buffer or another location, and redirect the program flow to execute the malicious code. Buffer overflow can compromise the security, functionality, or performance of the system, or even render it unusable or inaccessible. Buffer overflow can be caused by weaknesses in the software code, design, or configuration, which can be prevented by applying proper software change control and security patch management practices.