After significant vulnerabilities and misconfigurations were found in numerous production web applications, a security manager identified the need to implement better development controls. Which of the following controls should be verified? (Choose two.)
A) Input validation routines are enforced on the server side.
B) Operating systems do not permit null sessions.
C) Systems administrators receive application security training.
D) VPN connections are terminated after a defined period of time.
E) Error-handling logic fails securely.
F) OCSP calls are handled effectively.

Question

Quizplus · Accepted Answer

Input validation routines on the server side help prevent malicious input from causing vulnerabilities, and secure error-handling logic ensures that errors do not expose sensitive information or create security gaps.

After Significant Vulnerabilities and Misconfigurations Were Found in Numerous Production