EnterpriseSecurityException contains two types of messages: a log message for developers/system administrators and a user message safe for display. This separation prevents exposing sensitive technical details to end users while maintaining audit trails. Options A and B are each partially correct.