Which of the following are security components provided by an application security library or framework? (Select THREE).

An authorization database is a backend data store that holds access control records, not a component provided by an application security library or framework itself.

Fault injection is a software testing technique used to evaluate system resilience under failure conditions, not a security component delivered by an application security library.

Input validation is a core application security library function that sanitizes and checks user-supplied data at the application layer to prevent injection attacks and malformed input from reaching business logic.

Secure logging is provided by application security frameworks to ensure sensitive data is masked or omitted from logs, maintaining audit trails without exposing credentials or personal information.

Directory services such as LDAP or Active Directory are standalone infrastructure services that provide identity and directory functionality, and are not components of an application security library.

Encryption and decryption are fundamental cryptographic services built into application security libraries, enabling developers to protect data at rest and in transit without implementing raw cryptographic algorithms.