R

Ranjeet • 34.60K Points
Instructor I 

Q. Which of the following is true of improper error handling?

(A) Attackers can use error messages to extract specific information from a system.
(B) Attackers can use unexpected errors to knock an application off line, creating a denial-of- service attack.
(C) Unexpected errors can provide an attacker with a buffer or stack overflow condition that sets the stage for an arbitrary code execution.
(D) All of the above.

Correct Answer - Option(D)

Share

Discusssion

Login to discuss.

Loading comments.....

Related Posts

Q. One of the most obvious places to put an IDS sensor is near the firewall. Where exactly in relation to the firewall is the most productive placement?

Q. What is the purpose of a shadow honeypot?

Q. A false positive can be defined as…

Q. This is a trial and error method used to decode encrypted data through exhaustive effort rather than employing intellectual strategies.

Q. This is a Peripheral Component Interconnect (PCI) card that offloads SSL processing to speed up secure transactions on e-commerce Web sites.

Q. This is the encryption algorithm that will begin to supplant the Data Encryption Standard (DES) - and later Triple DES - over the next few years as the new standard encryption algorithm.

Q. This is the forging of an e-mail header so that the message appears to have originated from someone or somewhere other than the actual source.

Q. This is a type of network security attack in which the intruder takes control of a communication between two entities and masquerades as one of them.

Q. This is a program in which harmful code is contained inside apparently harmless programming or data.

Q. This is a mechanism for ensuring that only authorized users can copy or use specific software applications.

View All Posts