Palo Alto Networks Certified Detection and Remediation Analyst (PCDRA) — Question 56

Which Exploit Protection Module (EPM) can be used to prevent attacks based on OS function?

Answer options

• A. Memory Limit Heap Spray Check
• B. DLL Security
• C. UASLR
• D. JIT Mitigation

Correct answer: B

Explanation

DLL Security is designed to safeguard against attacks that target OS functions by restricting unauthorized access to DLLs. The other options, while important, focus on different aspects of exploit prevention: Memory Limit Heap Spray Check targets memory allocation, UASLR is related to address space layout randomization, and JIT Mitigation deals with just-in-time compilation issues.