An attacker is attempting to harvest user credentials on a client’s website. A security analyst notices multiple attempts of random usernames and passwords.
When the analyst types in a random username and password, the logon screen displays the following message:
Which of the following should the analyst recommend be enabled?
A . Input validation
B . Obfuscation
C . Error handling
D . Username lockout
Answer: C