Wesley is an incident handler in a company named Maddison Tech. One day, he was learning techniques for eradicating the insecure deserialization attacks.
What among the following should Wesley avoid from considering?
Wesley is an incident handler in a company named Maddison Tech. One day, he was learning techniques for eradicating the insecure deserialization attacks.
What among the following should Wesley avoid from considering?
Wesley should avoid allowing serialization for security-sensitive classes. Serialization can expose sensitive class details, making them vulnerable to attacks. It is crucial to avoid allowing serialization for these classes to maintain security.
Answer is C according to CSA coursework Module 6 pg 826
Answer is D: Module 06 pg 826 says: Avoid serialization for security-sensitive classes. Not allow.
Sorry for my mistake, answer is C
The answer is D
Correct Answer is D
Sorry！I make mistake, Answer is C.