Secure Programming Practices › Secure Programming Practices › Question #23249
MCQ Single Best Answer Easy

QProprietary protocols and data formats are:

ID: #23249 Secure Programming Practices 196 views
Question Info
#23249Q ID
EasyDifficulty
Secure Programming PracticesTopic
Start Quiz on This Topic
 Your Answer

Choose the Best Option

Click any option to instantly check if you're correct.

  • A Insecure, because vendors do not test them. ✔ ✖
  • B Secure, because of encryption. ✔ ✖
  • C Unsafe, because they rely on security by obscurity. ✔ ✖
  • D Safe, because buffer overflows cannot be effectively determined by random submission of data. ✔ ✖
Correct Answer: Option C

Explanation

The correct option is:

Unsafe, because they rely on security by obscurity.

Proprietary protocols and data formats often rely on security through obscurity, which is not a robust security approach. This method assumes that hiding details of the protocol will prevent attackers from exploiting vulnerabilities, but this is generally insecure because once the details are discovered, attackers can target the system.

 Continue Practice
No Previous Next Question
 Share

Share This Question

Challenge a friend or share with your study group.

 More from This Topic

Related MCQ Questions

In a multi-staged login mechanism, which of the following regarding application security should be ensured by Security check can be enforced at compile time by: Which of the following are secure programming guidelines? A) Always validate input for public methods. B) Neve Exception Handling refers to: Which of the following methods can be used by the client and server to validate user input? A) Validation usin Identify the correct statement in the following: Which of the following is not recommended to secure web applications against authenticated users? To improve the overall quality of web applications, developers should abide by which of the following rules? A race condition in a web server can cause which of the following? If an attacker submits multiple input parameters (query string, post data, cookies, etc) of the same name, the