Study. uk . com
  1. Home
  2. All questions
  3. Question 78

CISSP study material · question 78 of 500

A payments service fails part way through a multi-step transfer: funds have left the source ledger and the destination write has errored. Developers propose a handler that retries the remaining step and, failing that, marks the transfer complete so a nightly job can reconcile it. Which handling matches OWASP's 2025 guidance on exceptional conditions?

  1. Unwind every step the transaction completed and begin the whole transfer again from a clean state.
  2. Record the partial state, alert operations, and let the calling service decide whether to resume.
  3. Commit the completed steps and queue a compensating entry for when the destination ledger responds.
  4. Retry the failed step in place and settle any residual difference in the nightly reconciliation job.
Show the answer

Answer: A. Unwind every step the transaction completed and begin the whole transfer again from a clean state.

Half-finished transactions are where unrecoverable damage begins, so roll every step back and start over. Salvaging the remainder leaves the ledger inconsistent and the failure path unexercised.

Source: OWASP Top 10 A10:2025 (OWASP) — A10:2025 Mishandling of Exceptional Conditions > Background and How to prevent

Challenge yourself on this topic → Study as cards