Multiple choice technology security

In order to avoid information disclosure error messages containing stack traces, specific application information should be

  1. Sent to the user in a hidden field so that tech support can retrieve the information later

  2. Destroyed if it occurs to minimize the chances that this information might be inadvertently disclosed

  3. Logged on the server side

  4. A and C
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Error messages containing stack traces or implementation details should never be sent to users as they reveal internal application structure to potential attackers. Instead, detailed error information should be logged securely on the server for administrator review. Users should receive generic error messages, while technical details are preserved server-side for troubleshooting and security monitoring.

Keep practicing — related questions