Multiple choice technology security

Extra parameters which are currently not used in the application

  1. Is necessary to check some functionalities during the testing and production support

  2. May lead to security breaches

  3. Do not consume significant bandwidth and so can be allowed in the application

  4. Is necessary in case the application needs a future addition
Reveal answer Fill a bubble to check yourself
B Correct answer
Explanation

Extra parameters in HTTP requests can expose hidden functionality, bypass business logic validation, or trigger unintended code paths. Attackers use parameter pollution and tampering to exploit these unused parameters, potentially leading to authentication bypass, privilege escalation, or data exposure. Options A, C, and D incorrectly assume extra parameters are necessary or harmless.

Keep practicing — related questions