Multiple choice technology security

Certain folders in your application contain sensitive data. How would you securely hide their existence within your web application for all users?

  1. Send 403 return code

  2. Send 302 return code and redirect the user to the home page

  3. Send 404 return code

  4. Send 200 return code

Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Sending a 404 Not Found code hides a resource's existence entirely. A 403 Forbidden or 302 Found (redirect) reveals the resource exists but requires access rights or redirection, whereas a 200 OK indicates success and exposes the resource.