Multiple choice technology security

In order to avoid information disclosure error messages containing stack traces, specific application information should be

  1. Sent to the user in a hidden field so that tech support can retrieve the information later

  2. Destroyed if it occurs to minimize the chances that this information might be inadvertently disclosed

  3. Logged on the server side

  4. A and C
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Stack traces and detailed error messages contain sensitive implementation information that can aid attackers. Best practice is to log this information server-side for troubleshooting while showing only generic error messages to users. Option A (hidden field) exposes data to users. Option B (destroying it) loses debugging information. Option D is incorrect because A is not recommended.

Keep practicing — related questions