Fundamentals of InfoSecintermediate
Why can C programs be more prone to buffer-overflow vulnerabilities, according to the material?
Answer
C exposes memory pointers and does not automatically bounds-check arrays
Explanation
### Why this is right
C gives programmers direct access to memory through pointers and does not automatically check that array accesses remain within bounds. Errors in size handling can therefore overwrite neighboring memory.
### The concept
A buffer-overflow risk often begins with incorrect assumptions about input length. The material recommends checking buffer, string, and array sizes, using appropriate library functions, or choosing memory-safe languages such as C#, Python, or JavaScript.
### The other options
- **C always encrypts data before storing it**: encryption is unrelated to automatic bounds checking.
- **C cannot run on operating systems**: C is commonly used for system software.
- **C prevents programs from using arrays**: C supports arrays, but does not automatically enforce their bounds.
### Terms
- **Pointer**: a value referring to a memory location.
- **Bounds checking**: checking that an operation stays within an allowed memory range.
### Remember
Direct memory control increases the need for careful size checks.
Related Questions
- Explain why computer security is described as a process rather than a product. Include the roles of technology, people, and environment.(intermediate)
- Select ALL items the review identifies as possible security risks or losses.(intermediate)
- Arrange these broad security activities in a sensible cycle, beginning with identifying what needs protection.(intermediate)
- A security product can replace the continuing work of managing people, technology, and the operating environment.(intermediate)
- Which statement best captures the course review’s view of computer security?(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free