nerdexam
GAQM

CPEH-001 · Question #1023

CyberTech Inc. recently experienced SQL injection attacks on its official website. The company appointed Bob, a security professional, to build and incorporate defensive strategies against such…

The correct answer is C. Whitelist validation. See the full explanation below for the reasoning.

Question

CyberTech Inc. recently experienced SQL injection attacks on its official website. The company appointed Bob, a security professional, to build and incorporate defensive strategies against such attacks. Bob adopted a practice whereby only a list of entities such as the data type, range, size, and value, which have been approved for secured access, is accepted. What is the defensive technique employed by Bob in the above scenario?

Options

  • AOutput encoding
  • BEnforce least privileges
  • CWhitelist validation
  • DBlacklist validation

How the community answered

(40 responses)
  • A
    13% (5)
  • B
    3% (1)
  • C
    80% (32)
  • D
    5% (2)

Community Discussion

No community discussion yet for this question.

Full CPEH-001 Practice