Which of the Following Is True of Improper Error Handling

Multiple Choice

Which of the following is true of improper error handling?

A) Attackers can use error messages to extract specific information from a system.
B) Attackers can use unexpected errors to knock an application off line, creating a denial-of- service attack.
C) Unexpected errors can provide an attacker with a buffer or stack overflow condition that sets the stage for an arbitrary code execution.
D) All of the above.