Weak encryption or improper storage can let attackers steal or modify highly sensitive data such as credit card numbers or SSNs. This is known as:

Weak encryption or improper storage can let attackers steal or modify highly sensitive data such as credit card numbers or SSNs. This is known as:

• A. Access Control
• B. Sensitive Data Exposure
• C. Password Exploitation
• D. XML External Entity Attack

Answer: (B)

This is about protecting sensitive data from being exposed due to weak protections such as poor encryption or insecure storage. When encryption is weak or storage isn’t properly secured, attackers can read or alter highly sensitive information like credit card numbers or SSNs. That dynamic is exactly what Sensitive Data Exposure describes: the failure to protect data adequately, whether at rest or in transit, leading to data leaks or tampering. Access Control focuses on who is allowed to access resources, not on protecting the data itself from being exposed if protections are mishandled. Password Exploitation centers on stealing or cracking credentials. XML External Entity Attacks involve abusing XML processing to disclose or manipulate data through a vulnerability in parsing XML. Real-world examples of sensitive data exposure include plaintext storage, weak or no encryption, or misconfigured storage that allows unauthorized access.

This is about protecting sensitive data from being exposed due to weak protections such as poor encryption or insecure storage. When encryption is weak or storage isn’t properly secured, attackers can read or alter highly sensitive information like credit card numbers or SSNs. That dynamic is exactly what Sensitive Data Exposure describes: the failure to protect data adequately, whether at rest or in transit, leading to data leaks or tampering.

Access Control focuses on who is allowed to access resources, not on protecting the data itself from being exposed if protections are mishandled. Password Exploitation centers on stealing or cracking credentials. XML External Entity Attacks involve abusing XML processing to disclose or manipulate data through a vulnerability in parsing XML. Real-world examples of sensitive data exposure include plaintext storage, weak or no encryption, or misconfigured storage that allows unauthorized access.