Assessing a third party's risk by counting bugs in the code may not be the best measure of an attack surface within the supply chain. Which of the following is LEAST associated with the attack surface?

Question

Quizplus · Accepted Answer

Error messages are typically not directly associated with the attack surface, which is more concerned with points of entry and interaction like input protocols, target processes, and access rights.

Assessing a Third Party's Risk by Counting Bugs in the Code