(Choose 1 answer)
Your web application allows users to download their account statements in PDF format. What is the most secure way to implement this functionality?
A. Generate the PDF on the fly, store it in memory on the server, and send the bytes of the PDF to the browser directly (via 200 response).
B. Store all PDFs in an obscure directory on the web server and provide a link to the correct PDF depending on the user.
C. Store the PDFs in a database and retrieve the correct PDF by looking at the identifier/primary key provided in the HTTP request.
D. None of the other choices
Exit 4
