For a semester exam, which option is correct about error handling?

A. ignoring exceptions silently B. responding to failures without leaking sensitive information and with useful logging C. returning database passwords D. showing stack traces to users