Exam 312-50 topic 8 question 267 discussion

Actually, A is correct from my perspective, because using default credentials on the website is a security management problem

I feel the answer is most likely A. Database hardening (option B) is about securing the database from attacks, but the issue here is with the management of credentials, not the database structure or protection mechanisms. In this scenario, we have to assume the credentials were easy to guess, which shows weak security practices and policies to protect against unauthorized access. There could be confusion between the specific use of security tokens and other security practices. For instance, if B mentioned a practice that's commonly misunderstood or conflated with the use of tokens, like encryption or specific types of authentication methods, it might seem like a good choice without understanding the distinct role and definition of security tokens.

ok, here is my theory after reading the question so many times. Using default credentials to log in is a database-hardening issue. If the question stated the attacker could gain access using SQL injection techniques, then yes, it would be input validation. So, I'd go with B.

The B, C and D don't really make sense here

Answer is Correct

I strongly believe the answer should be C not B

The answer must be C, I think.