Que: Which of the following is not a vulnerability of the application layer?

a. Application design bugs may bypass security controls

b. Inadequate security controls force “all-or-nothing” approach

c. Logical bugs in programs may be by chance or on purpose be used for crashing programs