If a Java package contains sensitive data in one or more classes, and the data is declared public,
what attacks does that expose?

A.
Public data can be intercepted in transit using network sniffing tools.

B.
Malicious code can declare itself as part of the same package, and directly access the public
data with no means of protection.

C.
Public data can be accessed (read-write) via HTTP POST/POST arguments.

D.
The sensitive public data gets cached on the Java server, and is thus searchable using
traditional enterprise intranet search tools.

Explanation: