Which of the following is not an example of an application vulnerability?
- Fail-open error handling
- Running with least privilege
- Failure to properly close database connections
- Lack of sufficient logging
EXPLANATION
All security mechanisms
should deny access until specifically granted, not grant access until
denied, which is a common reason why fail open errors occur. Other errors can cause the system to crash or consume significant resources, effectively denying or reducing service to legitimate users.
0 comments:
Post a Comment