Câu 34: Lead Auditor: ISO/IEC 27001 Lead Auditor

A data processing tool crashed when a user added more data to the buffer than its storage capacity allows. The incident was caused by the tool's inability to bound check arrays. What kind of vulnerability is this?

1. A. Intrinsic vulnerability, i.e., inability to bound check arrays, is a characteristic of the data processing tool — đáp án hiện tại
2. B. Extrinsic vulnerability, i.e., the exploit of the buffer overflow vulnerability, is caused by an external factor
3. C. None; buffer overflow is not a vulnerability; it is a threat