adplus-dvertising
frame-decoration

Question

Why is it problematic to include a hard-coded maintenance account with a backdoor password in web application source code?

a.

It enhances code resilience against unexpected situations.

b.

It allows anyone with the backdoor password to bypass normal authentication.

c.

It ensures secure access to the system.

d.

It prevents the compromise of production code copies.

Answer: (b).It allows anyone with the backdoor password to bypass normal authentication. Explanation:Including a hard-coded maintenance account with a backdoor password allows anyone with the backdoor password to bypass normal authentication, posing a security risk.

Engage with the Community - Add Your Comment

Confused About the Answer? Ask for Details Here.

Know the Explanation? Add it Here.

Q. Why is it problematic to include a hard-coded maintenance account with a backdoor password in web application source code?

Similar Questions

Discover Related MCQs

Q. What can developers do to mitigate the risk of hard-coded credentials being disclosed in public repositories?

Q. What precaution should developers take regarding source code comments in web applications?

Q. Why might source code comments include security details that should remain secret?

Q. What is a race condition in the context of security vulnerabilities?

Q. What does TOCTTOU stand for in the context of race conditions?

Q. How can developers address TOCTTOU vulnerabilities?

Q. Why should APIs be properly secured with authentication mechanisms?

Q. What standard has largely replaced SOAP in modern APIs?

Q. What is the primary security consideration for communications between clients and servers using APIs?

Q. Why is the use of API keys important for securing non-public APIs?

Q. What risk is associated with running unsigned code?

Q. How does code signing contribute to code authenticity?

Q. What is the purpose of code signing in the context of end-user security?

Q. What is the main concern addressed by the OWASP Top Ten Web Application Security Risks?

Q. What is "injection flaws" in the context of web security?

Q. When does "broken authentication" occur?

Q. What is the consequence of "sensitive data exposure"?

Q. What is a potential outcome of "XML External Entities" vulnerabilities?

Q. When does "broken access control" occur?

Q. What is the root cause of "security misconfigurations"?