Multiple choice technology security

It is a leading practice to suppress detailed errors in the following places:

  1. Web Server configuration files

  2. Application configuration files

  3. Application error handlers

  4. All of the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Detailed error messages often leak sensitive information like database schema, file paths, version numbers, or internal logic that attackers can exploit. Best practice is to suppress these errors in web server configuration files (like Apache's httpd.conf or nginx.conf), application configuration files (web.xml, .config), and application error handlers (custom error pages). Users should see generic error messages while detailed errors go only to secure logs.

Keep practicing — related questions