Discussion: Since computer program code is written by humans and there are proper and improper ways of writing software code it is clear that human errors create the conditions for buffer overflows to exist.
Unfortunately as secure as any operating system is it becomes insecure when people install insecure code that can be host to buffer overflow attacks so it is human error that really causes these vulnerabilities.
Mitigation: The best mitigation against buffer overflow attacks is to:
-Be sure you keep your software updated with any patches released by the vendors.
-Have sensible configurations for your software. (e.g,. lock it down)
-Control access to your sensitive systems with network traffic normalizing systems like a filtering firewall or other devices that drops inappropriate network packets.
-If you don't need the software or service on a system, remove it. If it is useless it can only be a threat.
The following answers are incorrect:
The Windows Operating system: This isn't the intended answer.
Insecure programming languages: This isn't correct. Modern programming languages are capable
of being used securely. It's only when humans make mistakes that any programming language
becomes a threat.
Insecure Transport Protocols: This is partially correct. If you send logon ID and passwords over
the network in clear text, no programming language will protect you from sniffers.
The following reference(s) were/was used to create this question:
2011 EC-COUNCIL Official Curriculum, Ethical Hacking and Countermeasures, v71, Module 17,
Page 806

The following answers are incorrect:
A bridge simply connects multiple networks, a router examines each packet to determine which
network to forward it to. Is incorrect because both forward packets this is not distinctive enough.
"Bridge" and "router" are synonyms for equipment used to join two networks. Is incorrect because
the two are unique and operate at different layers of the OSI model.
The bridge is a specific type of router used to connect a LAN to the global Internet. Is incorrect
because a bridge does not connect a LAN to the global internet, but connects networks together
creating a LAN.

Attenuation is the loss of signal strength as it travels. The longer a cable, the more at tenuation occurs, which causes the signal carrying the data to deteriorate. This is why standards include suggested cable-run lengths. If a networking cable is too long, attenuation may occur. Basically, the data are in the form of electrons, and these electrons have to "swim" through a copper wire. However, this is more like swimming upstream, because there is a lot of resistance on the electrons working in this media. After a certain distance, the electrons start to slow down and their encoding format loses form. If the form gets too degraded, the receiving system cannot interpret them any longer. If a network administrator needs to run a cable longer than its recommended segment length, she needs to insert a repeater or some type of device that will amplify the signal and ensure it gets to its destination in the right encoding format.
Attenuation can also be caused by cable breaks and malfunctions. This is why cables should be tested. If a cable is suspected of attenuation problems, cable testers can inject signals into the cable and read the results at the end of the cable.
The following answers are incorrect:
Crosstalk - Crosstalk is one example of noise where unwanted electrical coupling between adjacent lines causes the signal in one wire to be picked up by the signal in an adjacent wire.
Noise - Noise is also a signal degradation but it refers to a large amount of electrical fluctuation that can interfere with the interpretation of the signal by the receiver.
Delay distortion - Delay distortion can result in a misinterpretation of a signal that results from transmitting a digital signal with varying frequency components. The various components arrive at the receiver with varying delays.
Following reference(s) were/was used to create this question:
CISA review manual 2014 Page number 265
Official ISC2 guide to CISSP CBK 3rd Edition Page number 229 &
CISSP All-In-One Exam guide 6th Edition Page Number 561

A transponder is a proximity identification device that does not require action by the user.
The reader transmits signals to the device and the device responds with an access code.
These transponder devices contain a radio receiver and transmitter, a storage place for the access code, control logic, and a battery.
A passive device only uses the power from the reader to detect the presence of the card.
Card swipes and smart cards are not proximity identification devices.
Source: HARRIS, Shon, All-In-One CISSP Certification Exam Guide, McGraw-
Hill/Osborne, 2002, chapter 6: Physical Security (page 323).