Q. Which of the following is true of improper error handling? (Solved)
1. Attackers can use error messages to extract specific information from a system.
2. Attackers can use unexpected errors to knock an application off line, creating a denial-of- service attack.
3. Unexpected errors can provide an attacker with a buffer or stack overflow condition that sets the stage for an arbitrary code execution.
4. All of the above.
- d. All of the above.