A pen tester discovers that a web server returns the exact same response body for a 404 and a 200 status code on certain endpoints - they only differ in the status line. What security testing problem does this create?
- A.It causes search engines to permanently deindex the page after the first crawl, and site owners must resubmit a sitemap through Search Console before Google will attempt to recrawl the affected URLs again
- B.It forces load balancers to mark the endpoint unhealthy and remove it from rotation, and traffic is redirected to a backup pool that has not been load tested
- C.It causes browsers to silently cache the 200 response and later serve it offline through the service worker layer, and users continue viewing outdated content long after the underlying resource was actually removed
- D.It breaks automated security scanners and crawlers that rely on HTTP status codes to determine whether a resource exists, potentially masking the true surface area of the application during enumeration
Why D is correct