MultipleChoice
Which threat modeling methodology involves creating or using collections of similar threats?
OptionsMultipleChoice
Which secure coding best practice ensures sensitive information is not disclosed in any responses to users, authorized or unauthorized?
OptionsMultipleChoice
Credit card numbers are encrypted when stored in the database but are automatically decrypted when data is fetched. The testing tool intercepted the GET response, and testers were able to view credit card numbers as clear text.
How should the organization remediate this vulnerability?
Options