Study. uk . com
  1. Home
  2. All questions
  3. Question 284

CompTIA Security+ study material · question 284 of 611

Besides the login form, which two flows commonly leak whether an address is registered? Choose two.

  1. Session logout
  2. Password reset
  3. Static asset delivery
  4. Registration
Show the answer

Answer: B. Password reset
D. Registration

All three of login, registration and reset must give the same answer, or the enumeration simply moves to another endpoint.

Source: OWASP Authentication Cheat Sheet (OWASP) — OWASP Authentication Cheat Sheet › Authentication Responses

Challenge yourself on this topic → Study as cards