Question

Which of the following is not a vulnerability of the application layer?

(a) Application design bugs may bypass security controls

(b) Inadequate security controls force “all-or-nothing” approach

(c) Logical bugs in programs may be by chance or on purpose be used for crashing programs

(d) Overloading of transport-layer mechanisms

I got this question by my school teacher while I was bunking the class.

Question is from Network Models in portion Understanding Network Models for Security of Cyber Security

Answer 1

Right answer is (d) Overloading of transport-layer mechanisms

The best I can explain: Application design flaws may bypass security controls, inadequate security controls as well as logical bugs in programs may be by chance or on purpose be used for crashing programs. These all are part of application layer vulnerability.