Which of the following is a true statement about Return Oriented Programming in Penetration testing?

This technique uses DEP for the control of execution flow.

It occurs when structured exception handler begins to gracefully close an application.

It occurs due to improper coding techniques.

In this exploit, the attackers goal is to control a crash and gain code execution on the given system.

It is not an exploit during Penetration test.