Multiple choice technology testing

Select the security best practice techniques (select more than one)

  1. Provide highest privilege

  2. Encode all client supplied data

  3. Use of parameterized stored procedure

  4. Providing detailed error message

Reveal answer Fill a bubble to check yourself
B,C,D Correct answer
Explanation

Encoding client data prevents XSS. Parameterized stored procedures help prevent SQL injection. Detailed error messages aid debugging but can leak sensitive information. Providing highest privilege (A) violates the principle of least privilege.