Multiple choice technology security

In order to avoid information disclosure error messages containing stack traces, specific application information should be

  1. Sent to the user in a hidden field so that tech support can retrieve the information later

  2. Destroyed if it occurs to minimize the chances that this information might be inadvertently disclosed

  3. Logged on the server side

  4. A and C
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Detailed error messages like stack traces should be logged securely on the server for debugging, while users receive generic error messages. Storing sensitive debugging info in hidden fields (option A) exposes it to anyone viewing the page source. Simply destroying the information (option B) loses valuable debugging data needed to fix the underlying problem.

Keep practicing — related questions