[Solved] Which of the following is true of improper error handling?

McqMate

Q.	Which of the following is true of improper error handling?
A.	Attackers can use error messages to extract specific information from a system.
B.	Attackers can use unexpected errors to knock an application off line, creating a denial-of- service attack.
C.	Unexpected errors can provide an attacker with a buffer or stack overflow condition that sets the stage for an arbitrary code execution.
D.	All of the above.
Answer» D. All of the above.

1.5k

0

Do you find this helpful?

1

View all MCQs in

Information Security

Discussion

No comments yet

Related MCQs

This is a trial and error method used to decode encrypted data through exhaustive effort rather than employing intellectual strategies.
Which of the following is an advantage of anomaly detection?
An IDS follows a two-step process consisting of a passive component and an active component. Which of the following is part of the active component?
Which of the following is NOT recommended for securing Web applications against authenticated users?
In which of the following exploits does an attacker insert malicious coding into a link that appears to be from a trustworthy source?
In which of the following exploits does an attacker add SQL code to a Web form input box to gain access to resources or make changes to data?
Which of the following is characteristic of spyware?
This is a series of messages sent by someone attempting to break into a computer to learn which computer network services the computer provides.
At which two traffic layers do most commercial IDSes generate signatures?
This is an assault on the integrity of a security system in which the attacker substitutes a section of cipher text (encrypted text) with a different section that looks like (but is not the same as) the one removed.