Which of the Following Threat Types Involves an Application Developer

question 283

Multiple Choice

Which of the following threat types involves an application developer leaving references to internal information and configurations in code that is exposed to the client?

• A) Sensitive data exposure
• B) Security misconfiguration
• C) Insecure direct object references
• D) Unvalidated redirect and forwards

---

Definitions:

Cost of Capital

The necessary yield on investment initiatives for a business to uphold its market price and appeal to investors.

Interest Rates

The fee, indicated as a percentage of the principal amount, that a lender charges a borrower for the utilization of resources.

Terminal Value

An estimate of a business's value beyond the explicit forecast period and into perpetuity, often used in financial modeling to estimate the company's long-term sustainability.

Non-Normal Cash Flows

Cash inflows and outflows that do not follow a regular, predictable pattern over time.