a. What is a buffer? b. What is a buffer overflow attack? c. What impacts can buffer overflows have? d. In a stack overflow, what is overwritten by the overflow? e. To where does the overwritten...

a. What is a buffer? b. What is a buffer overflow attack? c. What impacts can buffer overflows have? d. In a stack overflow, what is overwritten by the overflow? e. To where does the overwritten return address point? f. In the IIS IPP buffer overflow attack, what buffer is overflowed?

a. Why must you know a server’s role to know how to protect it? b. Why is it important to minimize both main applications and subsidiary applications? c. Why are security baselines needed for installing applications? d. Why is it important to minimize permissions for application programs? e. Why is application-level authentication superior to operating system authentication? f. Why should cryptographic protections be used?