A security analyst is performing a review of a web application.

CompTIA CAS-005 Question Answer

A security analyst is performing a review of a web application. During testing as a standard user, the following error log appears:

Error Message in Database Connection

Connection to host USA-WebApp-Database failed

Database " Prod-DB01 " not found

Table " CustomerInfo " not found

Please retry your request later

Which of the following best describes the analyst’s findings and a potential mitigation technique?

The findingsindicate unsecure references. All potential user input needs to be properly sanitized.

The findings indicate unsecure protocols. All cookies should be marked as HttpOnly.

The findings indicate information disclosure. The displayed error message should be modified.

The findings indicate a SQL injection. The database needs to be upgraded.

CAS-005 PDF/Engine

Get 65% Discount on All Products, Use Coupon: "ac4s65"