For a semester exam, which option is correct about defensive coding?

A. never checking boundaries B. assuming all input is safe C. coding with validation, error handling and security checks to resist misuse D. hiding all errors from logs