Study. uk . com
  1. Home
  2. All questions
  3. Question 586

CompTIA Security+ study material · question 586 of 611

Why does OWASP treat storing unnecessary sensitive data as a vulnerability in itself?

  1. Because it enlarges what a single breach discloses
  2. Because storage costs increase
  3. Because encryption becomes slower
  4. Because retention schedules become harder to apply
Show the answer

Answer: A. Because it enlarges what a single breach discloses

The data adds to the consequence of every future compromise without contributing to the application's function.

Source: OWASP Top 10 (OWASP) — OWASP Top Ten › Cryptographic Failures

Challenge yourself on this topic → Study as cards