CompTIA
ADR-001 · Question #59
If a Java package contains sensitive data in one or more classes, and the data is declared public, what attacks does that expose?
The correct answer is B. Malicious code can declare itself as part of the same package, and directly access the public data. See the full explanation below for the reasoning.
Question
If a Java package contains sensitive data in one or more classes, and the data is declared public, what attacks does that expose?
Options
- APublic data can be intercepted in transit using network sniffing tools.
- BMalicious code can declare itself as part of the same package, and directly access the public data
- CPublic data can be accessed (read-write) via HTTP POST/POST arguments.
- DThe sensitive public data gets cached on the Java server, and is thus searchable using traditional
How the community answered
(57 responses)- A7% (4)
- B75% (43)
- C4% (2)
- D14% (8)
Community Discussion
No community discussion yet for this question.