Which Is NOT True About a Buffer Overflow Attack

Multiple Choice

Which is NOT true about a buffer overflow attack?

A) Susceptibility to a buffer overflow is entirely contingent on software flaws.
B) A hacker does not need a good working knowledge of some programming language to create a buffer overflow.
C) A buffer overflow can load malicious data into memory and run it on a target machine.
D) A careful programmer will write applications so the buffer will truncate or reject data that exceeds the buffer length.