Upon entering an incorrect password, the logon screen displays a message informing the user that the password does not match the username provided and is not the required length of 12 characters. Which of the following secure coding techniques should a security analyst address with the application developers to follow security best practices?

Question

Quizplus · Accepted Answer

The error message provides too much information, which can be exploited by attackers. Proper error handling should ensure that messages do not reveal specific details about why authentication failed.

Upon Entering an Incorrect Password, the Logon Screen Displays a Message