Multiple choice technology security

In order to avoid information disclosure error messages containing stack traces, specific application information should be

  1. Sent to the user in a hidden field so that tech support can retrieve the information later

  2. Destroyed if it occurs to minimize the chances that this information might be inadvertently disclosed

  3. Logged on the server side

  4. A and C
Reveal answer Fill a bubble to check yourself
C Correct answer
Explanation

Detailed error messages with stack traces can reveal sensitive information about application internals, database structure, or security weaknesses. Sending this to users (even in hidden fields) risks exposure. Logging errors server-side preserves debugging information for technical support while preventing information disclosure to attackers. The user should see generic, safe error messages.

Keep practicing — related questions